Skip to content

CVE-2015-7871 Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.

CriticalCVSS 9.8 EPSS 81.8%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.

Affected products

ProductAffected versionsFixed in
debian/ntp(Debian:11) < 1:4.2.8p4+dfsg-1 1:4.2.8p4+dfsg-1
ntp >= 4.2.6, < 4.2.8 4.2.8
ntp >= 4.3.0, < 4.3.77 4.3.77
ntp = 4.2.5-p186 No fix listed
ntp = 4.2.5-p187 No fix listed
ntp = 4.2.5-p188 No fix listed
ntp = 4.2.5-p189 No fix listed
ntp = 4.2.5-p190 No fix listed
ntp = 4.2.5-p191 No fix listed
ntp = 4.2.5-p192 No fix listed
ntp = 4.2.5-p193 No fix listed
ntp = 4.2.5-p194 No fix listed
ntp = 4.2.5-p195 No fix listed
ntp = 4.2.5-p196 No fix listed
ntp = 4.2.5-p197 No fix listed
ntp = 4.2.5-p198 No fix listed
ntp = 4.2.5-p199 No fix listed
ntp = 4.2.5-p200 No fix listed
ntp = 4.2.5-p201 No fix listed
ntp = 4.2.5-p202 No fix listed
ntp = 4.2.5-p203 No fix listed
ntp = 4.2.5-p204 No fix listed
ntp = 4.2.5-p205 No fix listed
ntp = 4.2.5-p206 No fix listed
ntp = 4.2.5-p207 No fix listed
Show 67 more
ProductAffected versionsFixed in
ntp = 4.2.5-p208 No fix listed
ntp = 4.2.5-p209 No fix listed
ntp = 4.2.5-p210 No fix listed
ntp = 4.2.5-p211 No fix listed
ntp = 4.2.5-p212 No fix listed
ntp = 4.2.5-p213 No fix listed
ntp = 4.2.5-p214 No fix listed
ntp = 4.2.5-p215 No fix listed
ntp = 4.2.5-p216 No fix listed
ntp = 4.2.5-p217 No fix listed
ntp = 4.2.5-p218 No fix listed
ntp = 4.2.5-p219 No fix listed
ntp = 4.2.5-p220 No fix listed
ntp = 4.2.5-p221 No fix listed
ntp = 4.2.5-p222 No fix listed
ntp = 4.2.5-p223 No fix listed
ntp = 4.2.5-p224 No fix listed
ntp = 4.2.5-p225 No fix listed
ntp = 4.2.5-p226 No fix listed
ntp = 4.2.5-p227 No fix listed
ntp = 4.2.5-p228 No fix listed
ntp = 4.2.5-p229 No fix listed
ntp = 4.2.5-p230 No fix listed
ntp = 4.2.5-p231_rc1 No fix listed
ntp = 4.2.5-p232_rc1 No fix listed
ntp = 4.2.5-p233_rc1 No fix listed
ntp = 4.2.5-p234_rc1 No fix listed
ntp = 4.2.5-p235_rc1 No fix listed
ntp = 4.2.5-p236_rc1 No fix listed
ntp = 4.2.5-p237_rc1 No fix listed
ntp = 4.2.5-p238_rc1 No fix listed
ntp = 4.2.5-p239_rc1 No fix listed
ntp = 4.2.5-p240_rc1 No fix listed
ntp = 4.2.5-p241_rc1 No fix listed
ntp = 4.2.5-p242_rc1 No fix listed
ntp = 4.2.5-p243_rc1 No fix listed
ntp = 4.2.5-p244_rc1 No fix listed
ntp = 4.2.5-p245_rc1 No fix listed
ntp = 4.2.5-p246_rc1 No fix listed
ntp = 4.2.5-p247_rc1 No fix listed
ntp = 4.2.5-p248_rc1 No fix listed
ntp = 4.2.5-p249_rc1 No fix listed
ntp = 4.2.5-p250_rc1 No fix listed
ntp = 4.2.8-p1 No fix listed
ntp = 4.2.8-p1-beta1 No fix listed
ntp = 4.2.8-p1-beta2 No fix listed
ntp = 4.2.8-p1-beta3 No fix listed
ntp = 4.2.8-p1-beta4 No fix listed
ntp = 4.2.8-p1-beta5 No fix listed
ntp = 4.2.8-p1-rc1 No fix listed
ntp = 4.2.8-p1-rc2 No fix listed
ntp = 4.2.8-p2 No fix listed
ntp = 4.2.8-p2-rc1 No fix listed
ntp = 4.2.8-p2-rc2 No fix listed
ntp = 4.2.8-p2-rc3 No fix listed
ntp = 4.2.8-p3 No fix listed
ntp = 4.2.8-p3-rc1 No fix listed
ntp = 4.2.8-p3-rc2 No fix listed
ntp = 4.2.8-p3-rc3 No fix listed
debian linux = 7.0 No fix listed
debian linux = 8.0 No fix listed
debian linux = 9.0 No fix listed
netapp oncommand balance All versions No fix listed
netapp oncommand performance manager All versions No fix listed
netapp oncommand unified manager All versions No fix listed
netapp clustered data ontap All versions No fix listed
netapp data ontap All versions No fix listed

References