| Max CVSS | 5.0 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-5195 | 5.0 |
ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command that is not enabled during compilation.
|
13-02-2023 - 00:51 | 21-07-2017 - 14:29 | |
| CVE-2015-5194 | 5.0 |
The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands.
|
13-02-2023 - 00:51 | 21-07-2017 - 14:29 | |
| CVE-2015-5219 | 5.0 |
The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.
|
13-02-2023 - 00:51 | 21-07-2017 - 14:29 | |
| CVE-2015-7977 | 4.3 |
ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
|
01-02-2022 - 18:13 | 30-01-2017 - 21:59 | |
| CVE-2015-7974 | 4.0 |
NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
|
26-04-2021 - 17:42 | 26-01-2016 - 19:59 | |
| CVE-2015-7979 | 5.0 |
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.
|
15-04-2021 - 21:15 | 30-01-2017 - 21:59 | |
| CVE-2015-7703 | 4.3 |
The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and w
|
18-06-2020 - 18:21 | 24-07-2017 - 14:29 | |
| CVE-2015-7702 | 4.0 |
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
|
18-06-2020 - 17:10 | 07-08-2017 - 20:29 | |
| CVE-2015-7701 | 5.0 |
Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).
|
18-06-2020 - 16:58 | 07-08-2017 - 20:29 | |
| CVE-2015-7692 | 5.0 |
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
|
18-06-2020 - 16:51 | 07-08-2017 - 20:29 | |
| CVE-2015-7691 | 5.0 |
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to a
|
18-06-2020 - 16:42 | 07-08-2017 - 20:29 | |
| CVE-2015-7852 | 4.3 |
ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.
|
18-06-2020 - 15:23 | 07-08-2017 - 20:29 | |
| CVE-2015-7978 | 5.0 |
NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
|
18-05-2018 - 01:29 | 30-01-2017 - 21:59 | |
| CVE-2015-8158 | 4.3 |
The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values. <a href="http://cwe.mitre.org/data/definitions/835
|
05-01-2018 - 02:30 | 30-01-2017 - 21:59 |