CVE-2015-5195: ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmen...

Security readout for executives and security teams

CVE-2015-5195 is a denial-of-service issue in older NTP ntpd code. A remote attacker may be able to crash ntpd with a crafted statistics or filegen configuration command. The impact is service disruption, not data theft or system takeover, based on the provided sources. Exposure is most likely on legacy systems running ntpd from NTP before 4.2.7p112 or affected downstream vendor packages. The supplied data does not identify exact distribution package versions beyond vendor advisory references. Treat this as a legacy infrastructure hygiene issue. Prioritize internet-facing or business-critical time servers, but it is lower urgency than vulnerabilities enabling code execution or credential compromise. Mitigation focus: Upgrade ntpd using the applicable vendor security advisory or fixed package channel.; Use NTP 4.2.7p112 or later where upstream versioning applies.; Restrict network reachability to ntpd to trusted clients where operationally feasible..

Prepared

Jun 12, 2026, 22:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.