Published: 30/01/2017 Updated: 21/11/2017

CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 4.8 | Impact Score: 2.5 | Exploitability Score: 2.2

VMScore: 516

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P

The ntpq protocol in NTP prior to 4.2.8p7 allows remote malicious users to conduct replay attacks by sniffing the network.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ntp ntp

The ntpq protocol in NTP before 428p7 allows remote attackers to conduct replay attacks by sniffing the network ...

Multiple Cisco products incorporate a version of the Network Time Protocol daemon (ntpd) package Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition or modify the time being advertised by a device acting as a Network Time Protocol (N ...

CWE-284 https://www.kb.cert.org/vuls/id/718152 https://security.gentoo.org/glsa/201607-15 https://bto.bluecoat.com/security-advisory/sa113 http://www.securitytracker.com/id/1034782 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd http://support.ntp.org/bin/view/Main/NtpBug2947 http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc https://security.netapp.com/advisory/ntap-20200204-0003/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-8140 https://www.kb.cert.org/vuls/id/718152

CVE-2015-8140

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect