CVE-2015-7977 ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
MediumCVSS 5.9
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p7+dfsg-1 | 1:4.2.8p7+dfsg-1 |
| ntp | <= 4.2.8 | No fix listed |
| ntp | >= 4.3.0, < 4.3.90 | 4.3.90 |
| ntp | = 4.2.8 | No fix listed |
| ntp | = 4.2.8-p1 | No fix listed |
| ntp | = 4.2.8-p1-beta1 | No fix listed |
| ntp | = 4.2.8-p1-beta2 | No fix listed |
| ntp | = 4.2.8-p1-beta3 | No fix listed |
| ntp | = 4.2.8-p1-beta4 | No fix listed |
| ntp | = 4.2.8-p1-beta5 | No fix listed |
| ntp | = 4.2.8-p1-rc1 | No fix listed |
| ntp | = 4.2.8-p1-rc2 | No fix listed |
| ntp | = 4.2.8-p2 | No fix listed |
| ntp | = 4.2.8-p2-rc1 | No fix listed |
| ntp | = 4.2.8-p2-rc2 | No fix listed |
| ntp | = 4.2.8-p2-rc3 | No fix listed |
| ntp | = 4.2.8-p3 | No fix listed |
| ntp | = 4.2.8-p3-rc1 | No fix listed |
| ntp | = 4.2.8-p3-rc2 | No fix listed |
| ntp | = 4.2.8-p3-rc3 | No fix listed |
| ntp | = 4.2.8-p4 | No fix listed |
| ntp | = 4.2.8-p5 | No fix listed |
| oracle linux | = 6 | No fix listed |
| Siemens tim 4r-ie firmware | All versions | No fix listed |
| Siemens tim 4r-ie dnp3 firmware | All versions | No fix listed |
Show 65 more
| Product | Affected versions | Fixed in |
|---|---|---|
| netapp clustered data ontap | All versions | No fix listed |
| netapp oncommand balance | All versions | No fix listed |
| freebsd | = 9.3 | No fix listed |
| freebsd | = 9.3-p1 | No fix listed |
| freebsd | = 9.3-p10 | No fix listed |
| freebsd | = 9.3-p12 | No fix listed |
| freebsd | = 9.3-p13 | No fix listed |
| freebsd | = 9.3-p16 | No fix listed |
| freebsd | = 9.3-p19 | No fix listed |
| freebsd | = 9.3-p2 | No fix listed |
| freebsd | = 9.3-p20 | No fix listed |
| freebsd | = 9.3-p21 | No fix listed |
| freebsd | = 9.3-p22 | No fix listed |
| freebsd | = 9.3-p23 | No fix listed |
| freebsd | = 9.3-p24 | No fix listed |
| freebsd | = 9.3-p25 | No fix listed |
| freebsd | = 9.3-p28 | No fix listed |
| freebsd | = 9.3-p3 | No fix listed |
| freebsd | = 9.3-p30 | No fix listed |
| freebsd | = 9.3-p31 | No fix listed |
| freebsd | = 9.3-p32 | No fix listed |
| freebsd | = 9.3-p33 | No fix listed |
| freebsd | = 9.3-p34 | No fix listed |
| freebsd | = 9.3-p5 | No fix listed |
| freebsd | = 9.3-p6 | No fix listed |
| freebsd | = 9.3-p7 | No fix listed |
| freebsd | = 9.3-p8 | No fix listed |
| freebsd | = 9.3-p9 | No fix listed |
| freebsd | = 10.1 | No fix listed |
| freebsd | = 10.1-p1 | No fix listed |
| freebsd | = 10.1-p10 | No fix listed |
| freebsd | = 10.1-p12 | No fix listed |
| freebsd | = 10.1-p15 | No fix listed |
| freebsd | = 10.1-p16 | No fix listed |
| freebsd | = 10.1-p17 | No fix listed |
| freebsd | = 10.1-p18 | No fix listed |
| freebsd | = 10.1-p19 | No fix listed |
| freebsd | = 10.1-p2 | No fix listed |
| freebsd | = 10.1-p22 | No fix listed |
| freebsd | = 10.1-p24 | No fix listed |
| freebsd | = 10.1-p25 | No fix listed |
| freebsd | = 10.1-p26 | No fix listed |
| freebsd | = 10.1-p27 | No fix listed |
| freebsd | = 10.1-p3 | No fix listed |
| freebsd | = 10.1-p4 | No fix listed |
| freebsd | = 10.1-p5 | No fix listed |
| freebsd | = 10.1-p6 | No fix listed |
| freebsd | = 10.1-p7 | No fix listed |
| freebsd | = 10.1-p8 | No fix listed |
| freebsd | = 10.1-p9 | No fix listed |
| freebsd | = 10.2 | No fix listed |
| freebsd | = 10.2-p1 | No fix listed |
| freebsd | = 10.2-p10 | No fix listed |
| freebsd | = 10.2-p2 | No fix listed |
| freebsd | = 10.2-p5 | No fix listed |
| freebsd | = 10.2-p7 | No fix listed |
| freebsd | = 10.2-p8 | No fix listed |
| freebsd | = 10.2-p9 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- FEDORA-2016-34bc10a2c8 third-party-advisory vendor-advisory
- FEDORA-2016-8bb1932088 third-party-advisory vendor-advisory
- SUSE-SU-2016:1175 broken-link vendor-advisory
- SUSE-SU-2016:1177 broken-link vendor-advisory
- SUSE-SU-2016:1247 broken-link vendor-advisory
- openSUSE-SU-2016:1292 broken-link vendor-advisory
- SUSE-SU-2016:1311 broken-link vendor-advisory
- SUSE-SU-2016:1912 third-party-advisory vendor-advisory
- SUSE-SU-2016:2094 broken-link vendor-advisory
- openSUSE-SU-2016:1423 broken-link vendor-advisory
- RHSA-2016:0780 broken-link vendor-advisory
- RHSA-2016:2583 broken-link vendor-advisory
- support.ntp.org vendor-advisory
- support.ntp.org vendor-advisory
- 20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016 third-party-advisory vendor-advisory
- DSA-3629 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory
- 81815 third-party-advisory vdb-entry
- 1034782 third-party-advisory vdb-entry
- USN-3096-1 third-party-advisory vendor-advisory
- bto.bluecoat.com third-party-advisory
- cert-portal.siemens.com third-party-advisory
- FreeBSD-SA-16:09 third-party-advisory vendor-advisory
- GLSA-201607-15 third-party-advisory vendor-advisory
- security.netapp.com third-party-advisory
- us-cert.cisa.gov third-party-advisory us-government-resource
- VU#718152 third-party-advisory us-government-resource