CVE-2015-7973

NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
VendorProductVersion
ntpntp
𝑥
< 4.2.8
ntpntp
4.3.0 ≤
𝑥
< 4.3.90
ntpntp
4.2.8
ntpntp
4.2.8:p1
ntpntp
4.2.8:p1-beta1
ntpntp
4.2.8:p1-beta2
ntpntp
4.2.8:p1-beta3
ntpntp
4.2.8:p1-beta4
ntpntp
4.2.8:p1-beta5
ntpntp
4.2.8:p1-rc1
ntpntp
4.2.8:p1-rc2
ntpntp
4.2.8:p2
ntpntp
4.2.8:p2-rc1
ntpntp
4.2.8:p2-rc2
ntpntp
4.2.8:p2-rc3
ntpntp
4.2.8:p3
ntpntp
4.2.8:p3-rc1
ntpntp
4.2.8:p3-rc2
ntpntp
4.2.8:p3-rc3
ntpntp
4.2.8:p4
ntpntp
4.2.8:p5
siemenstim_4r-ie_firmware
*
siemenstim_4r-ie_dnp3_firmware
*
freebsdfreebsd
10.0 ≤
𝑥
< 10.1
freebsdfreebsd
9.3
freebsdfreebsd
9.3:p1
freebsdfreebsd
9.3:p10
freebsdfreebsd
9.3:p12
freebsdfreebsd
9.3:p13
freebsdfreebsd
9.3:p16
freebsdfreebsd
9.3:p19
freebsdfreebsd
9.3:p2
freebsdfreebsd
9.3:p20
freebsdfreebsd
9.3:p21
freebsdfreebsd
9.3:p22
freebsdfreebsd
9.3:p23
freebsdfreebsd
9.3:p24
freebsdfreebsd
9.3:p25
freebsdfreebsd
9.3:p3
freebsdfreebsd
9.3:p5
freebsdfreebsd
9.3:p6
freebsdfreebsd
9.3:p7
freebsdfreebsd
9.3:p8
freebsdfreebsd
9.3:p9
freebsdfreebsd
10.1
freebsdfreebsd
10.1:p1
freebsdfreebsd
10.1:p10
freebsdfreebsd
10.1:p12
freebsdfreebsd
10.1:p15
freebsdfreebsd
10.1:p16
freebsdfreebsd
10.1:p17
freebsdfreebsd
10.1:p18
freebsdfreebsd
10.1:p19
freebsdfreebsd
10.1:p2
freebsdfreebsd
10.1:p22
freebsdfreebsd
10.1:p24
freebsdfreebsd
10.1:p25
freebsdfreebsd
10.1:p26
freebsdfreebsd
10.1:p27
freebsdfreebsd
10.1:p3
freebsdfreebsd
10.1:p4
freebsdfreebsd
10.1:p5
freebsdfreebsd
10.1:p6
freebsdfreebsd
10.1:p7
freebsdfreebsd
10.1:p8
freebsdfreebsd
10.1:p9
freebsdfreebsd
10.2
freebsdfreebsd
10.2:p1
freebsdfreebsd
10.2:p10
freebsdfreebsd
10.2:p2
freebsdfreebsd
10.2:p5
freebsdfreebsd
10.2:p7
freebsdfreebsd
10.2:p8
freebsdfreebsd
10.2:p9
netappclustered_data_ontap
-
netapponcommand_balance
-
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ntp
bullseye
1:4.2.8p15+dfsg-1
fixed
jessie
no-dsa
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ntp
zesty
not-affected
yakkety
not-affected
xenial
Fixed 1:4.2.8p4+dfsg-3ubuntu5.3
released
wily
ignored
vivid
ignored
trusty
Fixed 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
released
precise
Fixed 1:4.2.6.p3+dfsg-1ubuntu3.11
released
Common Weakness Enumeration
References