CVE-2023-26552 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-26552 Interim 1 24 2025-12-23T02:14:08Z current 2023-04-13T23:15:30Z 2025-12-23T02:14:08Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-26552 mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2023-May/029305.html E-Mail link for SUSE-SU-2023:2142-1 https://lists.suse.com/pipermail/sle-security-updates/2023-May/014847.html E-Mail link for SUSE-SU-2023:2171-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.4 ntp ntp-4.2.8p15-100.1 ntp-4.2.8p15-150000.4.22.1 ntp-4.2.8p17-150600.18.2 ntp-doc ntp-doc-4.2.8p15-100.1 ntp-doc-4.2.8p15-150000.4.22.1 ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-Azure-BYOS ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-EC2-BYOS ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-EC2-On-Demand ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-GCE-BYOS ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-GCE-On-Demand ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production ntp-4.2.8p15-100.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production ntp-4.2.8p15-150000.4.22.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production ntp-4.2.8p15-150000.4.22.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production ntp-4.2.8p15-150000.4.22.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS ntp-4.2.8p15-150000.4.22.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production ntp-4.2.8p15-150000.4.22.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS ntp-4.2.8p15-150000.4.22.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production ntp-4.2.8p15-150000.4.22.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS ntp-4.2.8p15-150000.4.22.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production ntp-4.2.8p15-150000.4.22.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS ntp-4.2.8p15-150000.4.22.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production ntp-4.2.8p15-150000.4.22.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP4 ntp-4.2.8p15-150000.4.22.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP5 ntp-4.2.8p17-150600.18.2 as a component of SUSE Linux Enterprise Module for Legacy 15 SP6 ntp-4.2.8p17-150600.18.2 as a component of SUSE Linux Enterprise Module for Legacy 15 SP7 ntp-4.2.8p15-100.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA ntp-doc-4.2.8p15-100.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA ntp-4.2.8p15-100.1 as a component of SUSE Linux Enterprise Server 12 SP5 ntp-doc-4.2.8p15-100.1 as a component of SUSE Linux Enterprise Server 12 SP5 ntp-4.2.8p15-150000.4.22.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA ntp-4.2.8p15-100.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 ntp-doc-4.2.8p15-100.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 ntp-4.2.8p15-150000.4.22.1 as a component of openSUSE Leap 15.4 ntp-doc-4.2.8p15-150000.4.22.1 as a component of openSUSE Leap 15.4 ntp as a component of SUSE CaaS Platform 4.0 ntp as a component of SUSE Enterprise Storage 7 ntp as a component of SUSE Enterprise Storage 7.1 ntp as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS ntp as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS ntp as a component of SUSE Linux Enterprise Module for Legacy 15 SP5 ntp as a component of SUSE Linux Enterprise Server 12 SP2-BCL ntp-doc as a component of SUSE Linux Enterprise Server 12 SP2-BCL ntp as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS ntp-doc as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS ntp as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ntp-doc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ntp as a component of SUSE Linux Enterprise Server 15 SP1-LTSS ntp as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ntp as a component of SUSE Linux Enterprise Server 15 SP3-LTSS ntp as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS ntp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 ntp-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 ntp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 ntp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 ntp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 ntp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 ntp as a component of SUSE OpenStack Cloud 9 ntp-doc as a component of SUSE OpenStack Cloud 9 ntp as a component of SUSE OpenStack Cloud Crowbar 9 ntp-doc as a component of SUSE OpenStack Cloud Crowbar 9 mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd. CVE-2023-26552 Image SLES12-SP5-Azure-BYOS:ntp-4.2.8p15-100.1 Image SLES12-SP5-Azure-Basic-On-Demand:ntp-4.2.8p15-100.1 Image SLES12-SP5-Azure-HPC-BYOS:ntp-4.2.8p15-100.1 Image SLES12-SP5-Azure-HPC-On-Demand:ntp-4.2.8p15-100.1 Image SLES12-SP5-Azure-SAP-BYOS:ntp-4.2.8p15-100.1 Image SLES12-SP5-Azure-SAP-On-Demand:ntp-4.2.8p15-100.1 Image SLES12-SP5-Azure-Standard-On-Demand:ntp-4.2.8p15-100.1 Image SLES12-SP5-EC2-BYOS:ntp-4.2.8p15-100.1 Image SLES12-SP5-EC2-ECS-On-Demand:ntp-4.2.8p15-100.1 Image SLES12-SP5-EC2-On-Demand:ntp-4.2.8p15-100.1 Image SLES12-SP5-EC2-SAP-BYOS:ntp-4.2.8p15-100.1 Image SLES12-SP5-EC2-SAP-On-Demand:ntp-4.2.8p15-100.1 Image SLES12-SP5-GCE-BYOS:ntp-4.2.8p15-100.1 Image SLES12-SP5-GCE-On-Demand:ntp-4.2.8p15-100.1 Image SLES12-SP5-GCE-SAP-BYOS:ntp-4.2.8p15-100.1 Image SLES12-SP5-GCE-SAP-On-Demand:ntp-4.2.8p15-100.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ntp-4.2.8p15-100.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ntp-4.2.8p15-100.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ntp-4.2.8p15-150000.4.22.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ntp-4.2.8p15-150000.4.22.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:ntp-4.2.8p15-150000.4.22.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:ntp-4.2.8p15-150000.4.22.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:ntp-4.2.8p15-150000.4.22.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:ntp-4.2.8p15-150000.4.22.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:ntp-4.2.8p15-150000.4.22.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:ntp-4.2.8p15-150000.4.22.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:ntp-4.2.8p15-150000.4.22.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:ntp-4.2.8p15-150000.4.22.1 SUSE Linux Enterprise Module for Legacy 15 SP4:ntp-4.2.8p15-150000.4.22.1 SUSE Linux Enterprise Module for Legacy 15 SP5:ntp-4.2.8p15-150000.4.22.1 SUSE Linux Enterprise Module for Legacy 15 SP6:ntp-4.2.8p17-150600.18.2 SUSE Linux Enterprise Module for Legacy 15 SP7:ntp-4.2.8p17-150600.18.2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:ntp-doc-4.2.8p15-150000.4.22.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:ntp-4.2.8p15-100.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:ntp-doc-4.2.8p15-100.1 SUSE Linux Enterprise Server 12 SP5:ntp-4.2.8p15-100.1 SUSE Linux Enterprise Server 12 SP5:ntp-doc-4.2.8p15-100.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:ntp-4.2.8p15-150000.4.22.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:ntp-4.2.8p15-100.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:ntp-doc-4.2.8p15-100.1 openSUSE Leap 15.4:ntp-4.2.8p15-150000.4.22.1 openSUSE Leap 15.4:ntp-doc-4.2.8p15-150000.4.22.1 moderate 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H