Published: 07/08/2017 Updated: 18/06/2020

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ntp ntp
ntp ntp 4.2.8
debian debian linux 7.0
debian debian linux 8.0
debian debian linux 9.0
netapp oncommand balance -
netapp oncommand performance manager -
netapp oncommand unified manager -
netapp clustered data ontap -
netapp data ontap -

Several security issues were fixed in NTP ...

Several vulnerabilities were discovered in the Network Time Protocol daemon and utility programs: CVE-2015-5146 A flaw was found in the way ntpd processed certain remote configuration packets An attacker could use a specially crafted package to cause ntpd to crash if: ntpd enabled remote configuration The attacker had the ...

ntpd in NTP 42x before 428p4, and 43x before 4377 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file ...

Multiple Cisco products incorporate a version of the ntpd package Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition or modify the time being advertised by a device acting as a network time protocol (NTP) server On October 21st, 2 ...

CWE-835 https://bugzilla.redhat.com/show_bug.cgi?id=1274258 http://www.securityfocus.com/bid/77279 http://support.ntp.org/bin/view/Main/NtpBug2917 https://security.gentoo.org/glsa/201607-15 http://www.securitytracker.com/id/1033951 http://www.debian.org/security/2015/dsa-3388 https://security.netapp.com/advisory/ntap-20171004-0001/https://nvd.nist.gov https://usn.ubuntu.com/2783-1/

CVE-2015-7850

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect