CVE-2015-5300

CVE-2015-5300 describes a vulnerability in NTP versions prior to 4.2.8p5, specifically within the panic_gate check, affecting products from vendors like Canonical, Debian, and Red Hat. This flaw allows remote attackers to manipulate system time, either by setting an arbitrary time when NTP is started with the -g option, or by altering the time by up to 900 seconds through responding to trusted requests, leading to a denial of service due to an abort and restart. With a CVSS score of 7.5 (High), the vulnerability is network-exploitable with low attack complexity, resulting in a high impact on availability. While there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, and community discussion is minimal, though it has received some media coverage.