CVE-2015-7977

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
Affected Products (NVD)
VendorProductVersion
ntpntp
𝑥
≤ 4.2.8
ntpntp
4.3.0 ≤
𝑥
< 4.3.90
ntpntp
4.2.8
ntpntp
4.2.8:p1
ntpntp
4.2.8:p1-beta1
ntpntp
4.2.8:p1-beta2
ntpntp
4.2.8:p1-beta3
ntpntp
4.2.8:p1-beta4
ntpntp
4.2.8:p1-beta5
ntpntp
4.2.8:p1-rc1
ntpntp
4.2.8:p1-rc2
ntpntp
4.2.8:p2
ntpntp
4.2.8:p2-rc1
ntpntp
4.2.8:p2-rc2
ntpntp
4.2.8:p2-rc3
ntpntp
4.2.8:p3
ntpntp
4.2.8:p3-rc1
ntpntp
4.2.8:p3-rc2
ntpntp
4.2.8:p3-rc3
ntpntp
4.2.8:p4
ntpntp
4.2.8:p5
siemenstim_4r-ie_firmware
*
siemenstim_4r-ie_dnp3_firmware
-
netappclustered_data_ontap
-
netapponcommand_balance
-
freebsdfreebsd
9.3
freebsdfreebsd
9.3:p1
freebsdfreebsd
9.3:p10
freebsdfreebsd
9.3:p12
freebsdfreebsd
9.3:p13
freebsdfreebsd
9.3:p16
freebsdfreebsd
9.3:p19
freebsdfreebsd
9.3:p2
freebsdfreebsd
9.3:p20
freebsdfreebsd
9.3:p21
freebsdfreebsd
9.3:p22
freebsdfreebsd
9.3:p23
freebsdfreebsd
9.3:p24
freebsdfreebsd
9.3:p25
freebsdfreebsd
9.3:p28
freebsdfreebsd
9.3:p3
freebsdfreebsd
9.3:p30
freebsdfreebsd
9.3:p31
freebsdfreebsd
9.3:p32
freebsdfreebsd
9.3:p33
freebsdfreebsd
9.3:p34
freebsdfreebsd
9.3:p5
freebsdfreebsd
9.3:p6
freebsdfreebsd
9.3:p7
freebsdfreebsd
9.3:p8
freebsdfreebsd
9.3:p9
freebsdfreebsd
10.1
freebsdfreebsd
10.1:p1
freebsdfreebsd
10.1:p10
freebsdfreebsd
10.1:p12
freebsdfreebsd
10.1:p15
freebsdfreebsd
10.1:p16
freebsdfreebsd
10.1:p17
freebsdfreebsd
10.1:p18
freebsdfreebsd
10.1:p19
freebsdfreebsd
10.1:p2
freebsdfreebsd
10.1:p22
freebsdfreebsd
10.1:p24
freebsdfreebsd
10.1:p25
freebsdfreebsd
10.1:p26
freebsdfreebsd
10.1:p27
freebsdfreebsd
10.1:p3
freebsdfreebsd
10.1:p4
freebsdfreebsd
10.1:p5
freebsdfreebsd
10.1:p6
freebsdfreebsd
10.1:p7
freebsdfreebsd
10.1:p8
freebsdfreebsd
10.1:p9
freebsdfreebsd
10.2
freebsdfreebsd
10.2:p1
freebsdfreebsd
10.2:p10
freebsdfreebsd
10.2:p2
freebsdfreebsd
10.2:p5
freebsdfreebsd
10.2:p7
freebsdfreebsd
10.2:p8
freebsdfreebsd
10.2:p9
debiandebian_linux
8.0
debiandebian_linux
9.0
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ntp
bullseye
1:4.2.8p15+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ntp
precise
Fixed 1:4.2.6.p3+dfsg-1ubuntu3.11
released
trusty
Fixed 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
released
vivid
ignored
wily
ignored
xenial
Fixed 1:4.2.8p4+dfsg-3ubuntu5.3
released
yakkety
not-affected
zesty
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
yast2-ntp-client
suse enterprise sap 12
3.1.12.4-8.2
fixed
suse enterprise sap 12 SP1
3.1.22-6.2
fixed
suse enterprise server 12
3.1.12.4-8.2
fixed
suse enterprise server 12 SP1
3.1.22-6.2
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
ntp
RHEL 6
0:4.2.6p5-10.el6
fixed
RHEL 7
0:4.2.6p5-25.el7
fixed
ntp-doc
RHEL 6
0:4.2.6p5-10.el6
fixed
RHEL 7
0:4.2.6p5-25.el7
fixed
ntp-perl
RHEL 6
0:4.2.6p5-10.el6
fixed
RHEL 7
0:4.2.6p5-25.el7
fixed
ntpdate
RHEL 6
0:4.2.6p5-10.el6
fixed
RHEL 7
0:4.2.6p5-25.el7
fixed
sntp
RHEL 7
0:4.2.6p5-25.el7
fixed
References