CVE-2017-6459

5.5 mediumEPSS 0.4%

The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-03-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ntp:ntp

References

http://support.ntp.org/bin/view/Main/NtpBug3382
http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu
http://www.securityfocus.com/bid/97076
http://www.securitytracker.com/id/1038123
https://support.apple.com/HT208144

Check your stack JSON