CVE-2015-7704 The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.
HighCVSS 7.5
EPSS 10.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p4+dfsg-3 | 1:4.2.8p4+dfsg-3 |
| ntp | >= 4.2.0, < 4.2.8 | 4.2.8 |
| ntp | >= 4.3.0, < 4.3.77 | 4.3.77 |
| ntp | = 4.2.8 | No fix listed |
| ntp | = 4.2.8-p1 | No fix listed |
| ntp | = 4.2.8-p1-beta1 | No fix listed |
| ntp | = 4.2.8-p1-beta2 | No fix listed |
| ntp | = 4.2.8-p1-beta3 | No fix listed |
| ntp | = 4.2.8-p1-beta4 | No fix listed |
| ntp | = 4.2.8-p1-beta5 | No fix listed |
| ntp | = 4.2.8-p1-rc1 | No fix listed |
| ntp | = 4.2.8-p1-rc2 | No fix listed |
| ntp | = 4.2.8-p2 | No fix listed |
| ntp | = 4.2.8-p2-rc1 | No fix listed |
| ntp | = 4.2.8-p2-rc2 | No fix listed |
| ntp | = 4.2.8-p2-rc3 | No fix listed |
| ntp | = 4.2.8-p3 | No fix listed |
| ntp | = 4.2.8-p3-rc1 | No fix listed |
| ntp | = 4.2.8-p3-rc2 | No fix listed |
| ntp | = 4.2.8-p3-rc3 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| netapp oncommand performance manager | All versions | No fix listed |
| netapp oncommand unified manager | All versions | No fix listed |
Show 34 more
| Product | Affected versions | Fixed in |
|---|---|---|
| netapp clustered data ontap | All versions | No fix listed |
| netapp data ontap | All versions | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 6.5 | No fix listed |
| redhat enterprise linux server aus | = 6.6 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server aus | = 7.7 | No fix listed |
| redhat enterprise linux server eus | = 6.5 | No fix listed |
| redhat enterprise linux server eus | = 6.6 | No fix listed |
| redhat enterprise linux server eus | = 6.7 | No fix listed |
| redhat enterprise linux server eus | = 7.1 | No fix listed |
| redhat enterprise linux server eus | = 7.3 | No fix listed |
| redhat enterprise linux server eus | = 7.4 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.7 | No fix listed |
| redhat enterprise linux server tus | = 6.5 | No fix listed |
| redhat enterprise linux server tus | = 6.6 | No fix listed |
| redhat enterprise linux server tus | = 7.3 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.7 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| mcafee enterprise security manager | < 10.4.0 | 10.4.0 |
| mcafee enterprise security manager | >= 11.0.0, < 11.2.0 | 11.2.0 |
| citrix xenserver | = 6.0.2 | No fix listed |
| citrix xenserver | = 6.2.0 | No fix listed |
| citrix xenserver | = 6.5 | No fix listed |
| citrix xenserver | = 7.0 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- bugs.ntp.org issue-tracking vendor-advisory
- RHSA-2015:1930 third-party-advisory vendor-advisory
- RHSA-2015:2520 third-party-advisory vendor-advisory
- support.ntp.org vendor-advisory
- support.ntp.org release-notes vendor-advisory
- DSA-3388 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory
- 77280 third-party-advisory vdb-entry
- 1033951 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry
- eprint.iacr.org technical-description third-party-advisory
- h20566.www2.hpe.com third-party-advisory vdb-entry
- kc.mcafee.com third-party-advisory
- GLSA-201607-15 third-party-advisory vdb-entry vendor-advisory
- security.netapp.com third-party-advisory
- security.netapp.com third-party-advisory
- support.citrix.com third-party-advisory
- www.arista.com
- www.cs.bu.edu third-party-advisory
- VU#718152 third-party-advisory us-government-resource