CVE-2015-7850 ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.
MediumCVSS 6.5
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p4+dfsg-1 | 1:4.2.8p4+dfsg-1 |
| ntp | >= 4.2.0, < 4.2.8 | 4.2.8 |
| ntp | >= 4.3.0, < 4.3.77 | 4.3.77 |
| ntp | = 4.2.8 | No fix listed |
| ntp | = 4.2.8-p1 | No fix listed |
| ntp | = 4.2.8-p1-beta1 | No fix listed |
| ntp | = 4.2.8-p1-beta2 | No fix listed |
| ntp | = 4.2.8-p1-beta3 | No fix listed |
| ntp | = 4.2.8-p1-beta4 | No fix listed |
| ntp | = 4.2.8-p1-beta5 | No fix listed |
| ntp | = 4.2.8-p1-rc1 | No fix listed |
| ntp | = 4.2.8-p1-rc2 | No fix listed |
| ntp | = 4.2.8-p2 | No fix listed |
| ntp | = 4.2.8-p2-rc1 | No fix listed |
| ntp | = 4.2.8-p2-rc2 | No fix listed |
| ntp | = 4.2.8-p2-rc3 | No fix listed |
| ntp | = 4.2.8-p3 | No fix listed |
| ntp | = 4.2.8-p3-rc1 | No fix listed |
| ntp | = 4.2.8-p3-rc2 | No fix listed |
| ntp | = 4.2.8-p3-rc3 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| netapp oncommand balance | All versions | No fix listed |
| netapp oncommand performance manager | All versions | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| netapp oncommand unified manager | All versions | No fix listed |
| netapp clustered data ontap | All versions | No fix listed |
| netapp data ontap | All versions | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- support.ntp.org patch vendor-advisory
- DSA-3388 third-party-advisory vendor-advisory
- 77279 third-party-advisory vdb-entry
- 1033951 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry
- GLSA-201607-15 third-party-advisory vdb-entry vendor-advisory
- security.netapp.com third-party-advisory