CVE-2016-0727

7.8 highEPSS 1.3%

High (7.8) in canonical ubuntu linux. EPSS 1.3% chance of exploitation in the next 30 days.

The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04 LTS, on Ubuntu Wily, and before 1:4.2.8p4+dfsg-3ubuntu5.3 on Ubuntu 16.04 LTS allows local users with access to the ntp account to write to arbitrary files and consequently gain privileges via vectors involving statistics directory cleanup.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2017-04-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux

References

http://packetstormsecurity.com/files/141913/NTP-Privilege-Escalation.html
http://www.securityfocus.com/bid/81552
http://www.securitytracker.com/id/1034808
http://www.ubuntu.com/usn/USN-3096-1
https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1528050

Check your stack JSON