VulnerabilityModified
CVE-2015-7853
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.
CRITICAL 9.8EPSS 11.8%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.8%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 11.78% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- ntp/ntp · netapp/oncommand balance · netapp/oncommand performance manager · netapp/oncommand unified manager · netapp/clustered data ontap · netapp/data ontap
- Source
- cve@mitre.org
References
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html
- http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html
- http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html
- http://support.ntp.org/bin/view/Main/NtpBug2920Patch, Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp
- http://www.securityfocus.com/archive/1/536737/100/0/threaded
- http://www.securityfocus.com/archive/1/536760/100/0/threaded
- http://www.securityfocus.com/archive/1/536796/100/0/threaded
- http://www.securityfocus.com/archive/1/536833/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded
- http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded
- http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded
- http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded
- http://www.securityfocus.com/bid/77273Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033951Third Party Advisory, VDB Entry
- http://www.talosintel.com/vulnerability-reports/
- http://www.ubuntu.com/usn/USN-2783-1
- https://bto.bluecoat.com/security-advisory/sa103
- https://bugzilla.redhat.com/show_bug.cgi?id=1274262Issue Tracking, Third Party Advisory, VDB Entry
- https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
- https://security.gentoo.org/glsa/201607-15Third Party Advisory, VDB Entry
- https://security.netapp.com/advisory/ntap-20171004-0001/Third Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.