CVE-2017-6452

Publication date 27 March 2017

Last updated 25 August 2025


Ubuntu priority

Cvss 3 Severity Score

7.8 · High

Score breakdown

Description

Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line.

Read the notes from the security team

Status

Package Ubuntu Release Status
ntp 16.10 yakkety
Not affected
16.04 LTS xenial
Not affected
14.04 LTS trusty
Not affected
12.04 LTS precise
Not affected

Notes


mdeslaur

Windows-specific

Severity score breakdown

CVSS version: CVSS v3.0

Base score 7.8 · High

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H


Access our resources on patching vulnerabilities