CVE-2017-6451

Name: CVE-2017-6451
Creator: NVD / NIST
Published: 2017-03-27T17:59:00.523+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.48%

Last modified Jun 17, 2026

CVE-2017-6451 is a vulnerability of currently unknown severity. The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.. EPSS estimates a 0.48% chance of exploitation in the next 30 days.

Description

The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.

Metrics

EPSS Probability

0.48%

37.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-787

Affected Software

Vendor	Product	Versions	Update
Ntp	Ntp	4.2.8	P9
Ntp	Ntp	4.3.0	—
Ntp	Ntp	4.3.1	—
Ntp	Ntp	4.3.2	—
Ntp	Ntp	4.3.3	—
Ntp	Ntp	4.3.4	—
Ntp	Ntp	4.3.5	—
Ntp	Ntp	4.3.6	—
Ntp	Ntp	4.3.7	—
Ntp	Ntp	4.3.8	—
Ntp	Ntp	4.3.9	—
Ntp	Ntp	4.3.10	—
Ntp	Ntp	4.3.11	—
Ntp	Ntp	4.3.12	—
Ntp	Ntp	4.3.13	—
Ntp	Ntp	4.3.14	—
Ntp	Ntp	4.3.15	—
Ntp	Ntp	4.3.16	—
Ntp	Ntp	4.3.17	—
Ntp	Ntp	4.3.18	—
Ntp	Ntp	4.3.19	—
Ntp	Ntp	4.3.20	—
Ntp	Ntp	4.3.21	—
Ntp	Ntp	4.3.22	—
Ntp	Ntp	4.3.23	—
Ntp	Ntp	4.3.24	—
Ntp	Ntp	4.3.25	—
Ntp	Ntp	4.3.26	—
Ntp	Ntp	4.3.27	—
Ntp	Ntp	4.3.28	—
Ntp	Ntp	4.3.29	—
Ntp	Ntp	4.3.30	—
Ntp	Ntp	4.3.31	—
Ntp	Ntp	4.3.32	—
Ntp	Ntp	4.3.33	—
Ntp	Ntp	4.3.34	—
Ntp	Ntp	4.3.35	—
Ntp	Ntp	4.3.36	—
Ntp	Ntp	4.3.37	—
Ntp	Ntp	4.3.38	—
Ntp	Ntp	4.3.39	—
Ntp	Ntp	4.3.40	—
Ntp	Ntp	4.3.41	—
Ntp	Ntp	4.3.42	—
Ntp	Ntp	4.3.43	—
Ntp	Ntp	4.3.44	—
Ntp	Ntp	4.3.45	—
Ntp	Ntp	4.3.46	—
Ntp	Ntp	4.3.47	—
Ntp	Ntp	4.3.48	—

Showing 50 of 95 affected configurations. See NVD for the full list.

References

http://support.ntp.org/bin/view/Main/NtpBug3378Patch, Vendor Advisory
http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_SecuVendor Advisory
http://www.securityfocus.com/bid/97058Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038123Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039427
https://support.apple.com/HT208144
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
http://support.ntp.org/bin/view/Main/NtpBug3378Patch, Vendor Advisory
http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_SecuVendor Advisory
http://www.securityfocus.com/bid/97058Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038123Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039427
https://support.apple.com/HT208144
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

Timeline

Published: Mar 27, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-6451?

How severe is CVE-2017-6451?

Severity scoring for CVE-2017-6451 is pending analysis. The EPSS model estimates a 0.48% probability of exploitation in the next 30 days.

How do I fix CVE-2017-6451?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-6451?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST