{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "an out-of-bounds write may lead to a DoS",
    "tracking": {
      "current_release_date": "2026-08-11T16:53:50+00:00",
      "generator": {
        "date": "2026-08-11T16:53:50+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2023-26555",
      "initial_release_date": "2023-04-12T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T16:53:50+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7.9.z",
            "product": {
              "name": "Red Hat Enterprise Linux 7.9.z",
              "product_id": "rhel-7.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ntp",
            "product": {
              "name": "ntp",
              "product_id": "ntp",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ntp"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ntp-debuginfo",
            "product": {
              "name": "ntp-debuginfo",
              "product_id": "ntp-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ntp-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ntp-doc",
            "product": {
              "name": "ntp-doc",
              "product_id": "ntp-doc",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ntp-doc"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ntp-perl",
            "product": {
              "name": "ntp-perl",
              "product_id": "ntp-perl",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ntp-perl"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ntp",
            "product": {
              "name": "ntp",
              "product_id": "ntp.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ntp?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ntpdate",
            "product": {
              "name": "ntpdate",
              "product_id": "ntpdate",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ntpdate"
              }
            }
          },
          {
            "category": "product_version",
            "name": "sntp",
            "product": {
              "name": "sntp",
              "product_id": "sntp",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/sntp"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp as a component of Red Hat Enterprise Linux 7.9.z",
          "product_id": "rhel-7.els:ntp"
        },
        "product_reference": "ntp",
        "relates_to_product_reference": "rhel-7.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:ntp"
        },
        "product_reference": "ntp",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-debuginfo as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:ntp-debuginfo"
        },
        "product_reference": "ntp-debuginfo",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc as a component of Red Hat Enterprise Linux 7.9.z",
          "product_id": "rhel-7.els:ntp-doc"
        },
        "product_reference": "ntp-doc",
        "relates_to_product_reference": "rhel-7.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:ntp-doc"
        },
        "product_reference": "ntp-doc",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-perl as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:ntp-perl"
        },
        "product_reference": "ntp-perl",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-perl as a component of Red Hat Enterprise Linux 7.9.z",
          "product_id": "rhel-7.els:ntp-perl"
        },
        "product_reference": "ntp-perl",
        "relates_to_product_reference": "rhel-7.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp.src as a component of Red Hat Enterprise Linux 7.9.z",
          "product_id": "rhel-7.els:ntp.src"
        },
        "product_reference": "ntp.src",
        "relates_to_product_reference": "rhel-7.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:ntp.src"
        },
        "product_reference": "ntp.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntpdate as a component of Red Hat Enterprise Linux 7.9.z",
          "product_id": "rhel-7.els:ntpdate"
        },
        "product_reference": "ntpdate",
        "relates_to_product_reference": "rhel-7.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntpdate as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:ntpdate"
        },
        "product_reference": "ntpdate",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "sntp as a component of Red Hat Enterprise Linux 7.9.z",
          "product_id": "rhel-7.els:sntp"
        },
        "product_reference": "sntp",
        "relates_to_product_reference": "rhel-7.els"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-26555",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2023-04-12T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-6-els.els:ntp-debuginfo",
            "rhel-6-els.els:ntp-doc",
            "rhel-7.els:ntp-doc"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "The affected function only sees data that was received via a TTY from a certain GPS receiver, and only if such a GPS receiver is configured in ntp.conf, but it never gets called with data that was received over the network.\n\nAn exploit would require a manipulated GPS receiver that sends overlong lines to the driver. This means physical access or a compromised host would be needed (if the device allows firmware updates over serial), so we're not looking at an RCE vulnerability here, even on installations that do use this driver.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "A flaw was found in the NTP package. This flaw allows an attacker to cause a denial of service by remotely sending malicious data packets to the NTP server.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-6-els.els:ntp",
          "rhel-6-els.els:ntp-perl",
          "rhel-6-els.els:ntp.src",
          "rhel-6-els.els:ntpdate",
          "rhel-7.els:ntp",
          "rhel-7.els:ntp-perl",
          "rhel-7.els:ntp.src",
          "rhel-7.els:ntpdate",
          "rhel-7.els:sntp"
        ],
        "known_not_affected": [
          "rhel-6-els.els:ntp-debuginfo",
          "rhel-6-els.els:ntp-doc",
          "rhel-7.els:ntp-doc"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-26555"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-26555"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-26555"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "rhel-6-els.els:ntp",
            "rhel-6-els.els:ntp-perl",
            "rhel-6-els.els:ntp.src",
            "rhel-6-els.els:ntpdate"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "rhel-7.els:ntp",
            "rhel-7.els:ntp-perl",
            "rhel-7.els:ntp.src",
            "rhel-7.els:ntpdate",
            "rhel-7.els:sntp"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM"
          },
          "products": [
            "rhel-6-els.els:ntp",
            "rhel-6-els.els:ntp-debuginfo",
            "rhel-6-els.els:ntp-doc",
            "rhel-6-els.els:ntp-perl",
            "rhel-6-els.els:ntp.src",
            "rhel-6-els.els:ntpdate",
            "rhel-7.els:ntp",
            "rhel-7.els:ntp-doc",
            "rhel-7.els:ntp-perl",
            "rhel-7.els:ntp.src",
            "rhel-7.els:ntpdate",
            "rhel-7.els:sntp"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low",
          "product_ids": [
            "rhel-6-els.els:ntp",
            "rhel-6-els.els:ntp-debuginfo",
            "rhel-6-els.els:ntp-doc",
            "rhel-6-els.els:ntp-perl",
            "rhel-6-els.els:ntp.src",
            "rhel-6-els.els:ntpdate",
            "rhel-7.els:ntp",
            "rhel-7.els:ntp-doc",
            "rhel-7.els:ntp-perl",
            "rhel-7.els:ntp.src",
            "rhel-7.els:ntpdate",
            "rhel-7.els:sntp"
          ]
        }
      ],
      "title": "an out-of-bounds write may lead to a DoS"
    }
  ]
}