CVE-2015-5219
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NTPsec是一个更安全的NTP。 NTP 4.2.7p366之前版本存在代码问题漏洞，该漏洞源于程序没有正确的执行类型转换。远程攻击者可借助特制的NTP数据包利用该漏洞造成拒绝服务。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2015-5219
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
NTP 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NTPsec是一个更安全的NTP。 NTP 4.2.7p366之前版本存在代码问题漏洞，该漏洞源于程序没有正确的执行类型转换。远程攻击者可借助特制的NTP数据包利用该漏洞造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2015-5219
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-5219
请登录查看更多情报信息。
Patches & Fixes for CVE-2015-5219 (1)
Vendor Advisories for CVE-2015-5219 (14)
-
https://www-01.ibm.com/support/docview.wss?uid=swg21989542 x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf x_refsource_CONFIRM
-
https://www-01.ibm.com/support/docview.wss?uid=isg3T1024157 x_refsource_CONFIRM
-
https://www-01.ibm.com/support/docview.wss?uid=swg21985122 x_refsource_CONFIRM
-
https://www-01.ibm.com/support/docview.wss?uid=swg21986956 x_refsource_CONFIRM
-
https://bugzilla.redhat.com/show_bug.cgi?id=1255118 x_refsource_CONFIRM
-
https://www-01.ibm.com/support/docview.wss?uid=swg21988706 x_refsource_CONFIRM
-
https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099409 x_refsource_CONFIRM
-
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 x_refsource_CONFIRM
-
-
-
-
-
Mailing List Discussions for CVE-2015-5219 (5)
-
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html vendor-advisory x_refsource_SUSE
-
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html vendor-advisory x_refsource_FEDORA
-
-
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html vendor-advisory x_refsource_FEDORA
-
Other References for CVE-2015-5219 (3)
-
http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=51786731Gr4-NOrTBC_a_uXO4wuGhg x_refsource_CONFIRM
-
http://aix.software.ibm.com/aix/efixes/security/ntp_advisory4.asc x_refsource_CONFIRM
Same Patch Batch · n/a · 2017-07-21 · 26 CVEs total
| CVE-2015-3886 | libinfinity 安全漏洞 | |
| CVE-2017-11519 | TP-Link Archer C9(UN) 安全漏洞 | |
| CVE-2017-11517 | Geutebrueck Gcore server 缓冲区错误漏洞 | |
| CVE-2017-11516 | Yii Framework 跨站脚本漏洞 | |
| CVE-2017-7542 | Linux kernel 输入验证错误漏洞 | |
| CVE-2017-11505 | ImageMagick 安全漏洞 | |
| CVE-2017-9415 | Subsonic 跨站请求伪造漏洞 | |
| CVE-2015-5300 | NTP 输入验证漏洞 | |
| CVE-2015-5195 | NTP 输入验证错误漏洞 | |
| CVE-2015-5194 | NTP 输入验证错误漏洞 | |
| CVE-2015-4639 | Koha Libraries 跨站请求伪造漏洞 | |
| CVE-2015-3932 | Netlock Mokka 安全漏洞 | |
| CVE-2015-3931 | Microsec e-Szigno 安全漏洞 | |
| CVE-2017-10993 | Contao 安全漏洞 | |
| CVE-2015-3640 | phpMyBackupPro 安全漏洞 | |
| CVE-2015-3639 | phpMyBackupPro 安全漏洞 | |
| CVE-2015-3638 | phpMyBackupPro 安全漏洞 | |
| CVE-2015-3421 | WordPress eShop插件安全漏洞 | |
| CVE-2015-3198 | Red Hat WildFly Undertow模块安全漏洞 | |
| CVE-2015-3170 | selinux-policy 安全漏洞 |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-108836
Ollama Pull API name.go IsValid server-side request forgery -
CVE-2026-108829
Zen Cart Module Configuration modules.php sql injection -
CVE-2026-108828
Zen Cart Admin Panel configuration.php eval sql injection -
CVE-2026-108827
Zen Cart Administrative Module Management general.php zen_ca -
CVE-2026-108826
Zen Cart PayPal IPN paypaldp.php zen_db_perform sql injectio
V. Comments for CVE-2015-5219
No comments yet