CVE-2015-7977

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
VendorProductVersion
ntpntp
𝑥
≤ 4.2.8
ntpntp
4.3.0 ≤
𝑥
< 4.3.90
ntpntp
4.2.8
ntpntp
4.2.8:p1
ntpntp
4.2.8:p1-beta1
ntpntp
4.2.8:p1-beta2
ntpntp
4.2.8:p1-beta3
ntpntp
4.2.8:p1-beta4
ntpntp
4.2.8:p1-beta5
ntpntp
4.2.8:p1-rc1
ntpntp
4.2.8:p1-rc2
ntpntp
4.2.8:p2
ntpntp
4.2.8:p2-rc1
ntpntp
4.2.8:p2-rc2
ntpntp
4.2.8:p2-rc3
ntpntp
4.2.8:p3
ntpntp
4.2.8:p3-rc1
ntpntp
4.2.8:p3-rc2
ntpntp
4.2.8:p3-rc3
ntpntp
4.2.8:p4
ntpntp
4.2.8:p5
siemenstim_4r-ie_firmware
*
siemenstim_4r-ie_dnp3_firmware
-
netappclustered_data_ontap
-
netapponcommand_balance
-
freebsdfreebsd
9.3
freebsdfreebsd
9.3:p1
freebsdfreebsd
9.3:p10
freebsdfreebsd
9.3:p12
freebsdfreebsd
9.3:p13
freebsdfreebsd
9.3:p16
freebsdfreebsd
9.3:p19
freebsdfreebsd
9.3:p2
freebsdfreebsd
9.3:p20
freebsdfreebsd
9.3:p21
freebsdfreebsd
9.3:p22
freebsdfreebsd
9.3:p23
freebsdfreebsd
9.3:p24
freebsdfreebsd
9.3:p25
freebsdfreebsd
9.3:p28
freebsdfreebsd
9.3:p3
freebsdfreebsd
9.3:p30
freebsdfreebsd
9.3:p31
freebsdfreebsd
9.3:p32
freebsdfreebsd
9.3:p33
freebsdfreebsd
9.3:p34
freebsdfreebsd
9.3:p5
freebsdfreebsd
9.3:p6
freebsdfreebsd
9.3:p7
freebsdfreebsd
9.3:p8
freebsdfreebsd
9.3:p9
freebsdfreebsd
10.1
freebsdfreebsd
10.1:p1
freebsdfreebsd
10.1:p10
freebsdfreebsd
10.1:p12
freebsdfreebsd
10.1:p15
freebsdfreebsd
10.1:p16
freebsdfreebsd
10.1:p17
freebsdfreebsd
10.1:p18
freebsdfreebsd
10.1:p19
freebsdfreebsd
10.1:p2
freebsdfreebsd
10.1:p22
freebsdfreebsd
10.1:p24
freebsdfreebsd
10.1:p25
freebsdfreebsd
10.1:p26
freebsdfreebsd
10.1:p27
freebsdfreebsd
10.1:p3
freebsdfreebsd
10.1:p4
freebsdfreebsd
10.1:p5
freebsdfreebsd
10.1:p6
freebsdfreebsd
10.1:p7
freebsdfreebsd
10.1:p8
freebsdfreebsd
10.1:p9
freebsdfreebsd
10.2
freebsdfreebsd
10.2:p1
freebsdfreebsd
10.2:p10
freebsdfreebsd
10.2:p2
freebsdfreebsd
10.2:p5
freebsdfreebsd
10.2:p7
freebsdfreebsd
10.2:p8
freebsdfreebsd
10.2:p9
debiandebian_linux
8.0
debiandebian_linux
9.0
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ntp
bullseye
1:4.2.8p15+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ntp
zesty
not-affected
yakkety
not-affected
xenial
Fixed 1:4.2.8p4+dfsg-3ubuntu5.3
released
wily
ignored
vivid
ignored
trusty
Fixed 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
released
precise
Fixed 1:4.2.6.p3+dfsg-1ubuntu3.11
released
References