csaf_suse - suse-su-2016:1247-1

Vulnerability from csaf_suse

Published

2016-05-06 07:50

Modified

2016-05-06 07:50

Summary

Security update for ntp

Notes

Title of the patch

Security update for ntp

Description of the patch

ntp was updated to version 4.2.8p6 to fix 28 security issues. Major functional changes: - The 'sntp' commandline tool changed its option handling in a major way, some options have been renamed or dropped. - 'controlkey 1' is added during update to ntp.conf to allow sntp to work. - The local clock is being disabled during update. - ntpd is no longer running chrooted. Other functional changes: - ntp-signd is installed. - 'enable mode7' can be added to the configuration to allow ntdpc to work as compatibility mode option. - 'kod' was removed from the default restrictions. - SHA1 keys are used by default instead of MD5 keys. Also yast2-ntp-client was updated to match some sntp syntax changes. (bsc#937837) These security issues were fixed: - CVE-2015-8158: Fixed potential infinite loop in ntpq (bsc#962966). - CVE-2015-8138: Zero Origin Timestamp Bypass (bsc#963002). - CVE-2015-7979: Off-path Denial of Service (DoS) attack on authenticated broadcast mode (bsc#962784). - CVE-2015-7978: Stack exhaustion in recursive traversal of restriction list (bsc#963000). - CVE-2015-7977: reslist NULL pointer dereference (bsc#962970). - CVE-2015-7976: ntpq saveconfig command allows dangerous characters in filenames (bsc#962802). - CVE-2015-7975: nextvar() missing length check (bsc#962988). - CVE-2015-7974: Skeleton Key: Missing key check allows impersonation between authenticated peers (bsc#962960). - CVE-2015-7973: Replay attack on authenticated broadcast mode (bsc#962995). - CVE-2015-8140: ntpq vulnerable to replay attacks (bsc#962994). - CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin (bsc#962997). - CVE-2015-5300: MITM attacker could have forced ntpd to make a step larger than the panic threshold (bsc#951629). - CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK (bsc#951608). - CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values (bsc#951608). - CVE-2015-7854: Password Length Memory Corruption Vulnerability (bsc#951608). - CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow (bsc#951608). - CVE-2015-7852: ntpq atoascii() Memory Corruption Vulnerability (bsc#951608). - CVE-2015-7851: saveconfig Directory Traversal Vulnerability (bsc#951608). - CVE-2015-7850: remote config logfile-keyfile (bsc#951608). - CVE-2015-7849: trusted key use-after-free (bsc#951608). - CVE-2015-7848: mode 7 loop counter underrun (bsc#951608). - CVE-2015-7701: Slow memory leak in CRYPTO_ASSOC (bsc#951608). - CVE-2015-7703: configuration directives 'pidfile' and 'driftfile' should only be allowed locally (bsc#951608). - CVE-2015-7704, CVE-2015-7705: Clients that receive a KoD should validate the origin timestamp field (bsc#951608). - CVE-2015-7691, CVE-2015-7692, CVE-2015-7702: Incomplete autokey data packet length checks (bsc#951608). These non-security issues were fixed: - fate#320758 bsc#975981: Enable compile-time support for MS-SNTP (--enable-ntp-signd). This replaces the w32 patches in 4.2.4 that added the authreg directive. - bsc#962318: Call /usr/sbin/sntp with full path to synchronize in start-ntpd. When run as cron job, /usr/sbin/ is not in the path, which caused the synchronization to fail. - bsc#782060: Speedup ntpq. - bsc#916617: Add /var/db/ntp-kod. - bsc#956773: Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems. - bsc#951559,bsc#975496: Fix the TZ offset output of sntp during DST. - Add ntp-fork.patch and build with threads disabled to allow name resolution even when running chrooted. - Add a controlkey line to /etc/ntp.conf if one does not already exist to allow runtime configuuration via ntpq. - bsc#946386: Temporarily disable memlock to avoid problems due to high memory usage during name resolution. - bsc#905885: Use SHA1 instead of MD5 for symmetric keys. - Improve runtime configuration: * Read keytype from ntp.conf * Don't write ntp keys to syslog. - Fix legacy action scripts to pass on command line arguments. - bsc#944300: Remove 'kod' from the restrict line in ntp.conf. - bsc#936327: Use ntpq instead of deprecated ntpdc in start-ntpd. - Add a controlkey to ntp.conf to make the above work. - Don't let 'keysdir' lines in ntp.conf trigger the 'keys' parser. - Disable mode 7 (ntpdc) again, now that we don't use it anymore. - Add 'addserver' as a new legacy action. - bsc#910063: Fix the comment regarding addserver in ntp.conf. - bsc#926510: Disable chroot by default. - bsc#920238: Enable ntpdc for backwards compatibility.

Patchnames

SUSE-SLE-DESKTOP-12-2016-727,SUSE-SLE-SDK-12-2016-727,SUSE-SLE-SERVER-12-2016-727

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for ntp",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "ntp was updated to version 4.2.8p6 to fix 28 security issues.\n\nMajor functional changes:\n- The 'sntp' commandline tool changed its option handling in a major way,\n  some options have been renamed or dropped.\n- 'controlkey 1' is added during update to ntp.conf to allow sntp to work.\n- The local clock is being disabled during update.\n- ntpd is no longer running chrooted.\n\nOther functional changes:\n- ntp-signd is installed.\n- 'enable mode7' can be added to the configuration to allow ntdpc to work as compatibility mode option.\n- 'kod' was removed from the default restrictions.\n- SHA1 keys are used by default instead of MD5 keys.\n\nAlso yast2-ntp-client was updated to match some sntp syntax changes. (bsc#937837)\n\nThese security issues were fixed:\n- CVE-2015-8158: Fixed potential infinite loop in ntpq (bsc#962966).\n- CVE-2015-8138: Zero Origin Timestamp Bypass (bsc#963002).\n- CVE-2015-7979: Off-path Denial of Service (DoS) attack on authenticated broadcast mode (bsc#962784).\n- CVE-2015-7978: Stack exhaustion in recursive traversal of restriction list (bsc#963000).\n- CVE-2015-7977: reslist NULL pointer dereference (bsc#962970).\n- CVE-2015-7976: ntpq saveconfig command allows dangerous characters in filenames (bsc#962802).\n- CVE-2015-7975: nextvar() missing length check (bsc#962988).\n- CVE-2015-7974: Skeleton Key: Missing key check allows impersonation between authenticated peers (bsc#962960).\n- CVE-2015-7973: Replay attack on authenticated broadcast mode (bsc#962995).\n- CVE-2015-8140: ntpq vulnerable to replay attacks (bsc#962994).\n- CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin (bsc#962997).\n- CVE-2015-5300: MITM attacker could have forced ntpd to make a step larger than the panic threshold (bsc#951629).\n- CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK (bsc#951608).\n- CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values (bsc#951608).\n- CVE-2015-7854: Password Length Memory Corruption Vulnerability (bsc#951608).\n- CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow (bsc#951608).\n- CVE-2015-7852: ntpq atoascii() Memory Corruption Vulnerability (bsc#951608).\n- CVE-2015-7851: saveconfig Directory Traversal Vulnerability (bsc#951608).\n- CVE-2015-7850: remote config logfile-keyfile (bsc#951608).\n- CVE-2015-7849: trusted key use-after-free (bsc#951608).\n- CVE-2015-7848: mode 7 loop counter underrun (bsc#951608).\n- CVE-2015-7701: Slow memory leak in CRYPTO_ASSOC (bsc#951608).\n- CVE-2015-7703: configuration directives 'pidfile' and 'driftfile' should only be allowed locally (bsc#951608).\n- CVE-2015-7704, CVE-2015-7705: Clients that receive a KoD should validate the origin timestamp field (bsc#951608).\n- CVE-2015-7691, CVE-2015-7692, CVE-2015-7702: Incomplete autokey data packet length checks (bsc#951608).\n\nThese non-security issues were fixed:\n- fate#320758 bsc#975981: Enable compile-time support for MS-SNTP (--enable-ntp-signd).\n  This replaces the w32 patches in 4.2.4 that added the authreg\n  directive.\n- bsc#962318: Call /usr/sbin/sntp with full path to synchronize in start-ntpd.\n  When run as cron job, /usr/sbin/ is not in the path, which caused\n  the synchronization to fail.\n- bsc#782060: Speedup ntpq.\n- bsc#916617: Add /var/db/ntp-kod.\n- bsc#956773: Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems.\n- bsc#951559,bsc#975496: Fix the TZ offset output of sntp during DST.\n- Add ntp-fork.patch and build with threads disabled to allow name resolution even when running chrooted.\n- Add a controlkey line to /etc/ntp.conf if one does not already exist to allow runtime configuuration via ntpq.\n- bsc#946386: Temporarily disable memlock to avoid problems due to high memory usage during name resolution.\n- bsc#905885: Use SHA1 instead of MD5 for symmetric keys.\n- Improve runtime configuration:\n  * Read keytype from ntp.conf\n  * Don't write ntp keys to syslog.\n- Fix legacy action scripts to pass on command line arguments.\n- bsc#944300: Remove 'kod' from the restrict line in ntp.conf.\n- bsc#936327: Use ntpq instead of deprecated ntpdc in start-ntpd.\n- Add a controlkey to ntp.conf to make the above work.\n- Don't let 'keysdir' lines in ntp.conf trigger the 'keys' parser.\n- Disable mode 7 (ntpdc) again, now that we don't use it anymore.\n- Add 'addserver' as a new legacy action.\n- bsc#910063: Fix the comment regarding addserver in ntp.conf.\n- bsc#926510: Disable chroot by default.\n- bsc#920238: Enable ntpdc for backwards compatibility.\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-SLE-DESKTOP-12-2016-727,SUSE-SLE-SDK-12-2016-727,SUSE-SLE-SERVER-12-2016-727",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1247-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2016:1247-1",
            url: "https://www.suse.com/support/update/announcement/2016/suse-su-20161247-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2016:1247-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2016-May/002043.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 782060",
            url: "https://bugzilla.suse.com/782060",
         },
         {
            category: "self",
            summary: "SUSE Bug 905885",
            url: "https://bugzilla.suse.com/905885",
         },
         {
            category: "self",
            summary: "SUSE Bug 910063",
            url: "https://bugzilla.suse.com/910063",
         },
         {
            category: "self",
            summary: "SUSE Bug 916617",
            url: "https://bugzilla.suse.com/916617",
         },
         {
            category: "self",
            summary: "SUSE Bug 920238",
            url: "https://bugzilla.suse.com/920238",
         },
         {
            category: "self",
            summary: "SUSE Bug 926510",
            url: "https://bugzilla.suse.com/926510",
         },
         {
            category: "self",
            summary: "SUSE Bug 936327",
            url: "https://bugzilla.suse.com/936327",
         },
         {
            category: "self",
            summary: "SUSE Bug 937837",
            url: "https://bugzilla.suse.com/937837",
         },
         {
            category: "self",
            summary: "SUSE Bug 942587",
            url: "https://bugzilla.suse.com/942587",
         },
         {
            category: "self",
            summary: "SUSE Bug 944300",
            url: "https://bugzilla.suse.com/944300",
         },
         {
            category: "self",
            summary: "SUSE Bug 946386",
            url: "https://bugzilla.suse.com/946386",
         },
         {
            category: "self",
            summary: "SUSE Bug 951559",
            url: "https://bugzilla.suse.com/951559",
         },
         {
            category: "self",
            summary: "SUSE Bug 951608",
            url: "https://bugzilla.suse.com/951608",
         },
         {
            category: "self",
            summary: "SUSE Bug 951629",
            url: "https://bugzilla.suse.com/951629",
         },
         {
            category: "self",
            summary: "SUSE Bug 954982",
            url: "https://bugzilla.suse.com/954982",
         },
         {
            category: "self",
            summary: "SUSE Bug 956773",
            url: "https://bugzilla.suse.com/956773",
         },
         {
            category: "self",
            summary: "SUSE Bug 962318",
            url: "https://bugzilla.suse.com/962318",
         },
         {
            category: "self",
            summary: "SUSE Bug 962784",
            url: "https://bugzilla.suse.com/962784",
         },
         {
            category: "self",
            summary: "SUSE Bug 962802",
            url: "https://bugzilla.suse.com/962802",
         },
         {
            category: "self",
            summary: "SUSE Bug 962960",
            url: "https://bugzilla.suse.com/962960",
         },
         {
            category: "self",
            summary: "SUSE Bug 962966",
            url: "https://bugzilla.suse.com/962966",
         },
         {
            category: "self",
            summary: "SUSE Bug 962970",
            url: "https://bugzilla.suse.com/962970",
         },
         {
            category: "self",
            summary: "SUSE Bug 962988",
            url: "https://bugzilla.suse.com/962988",
         },
         {
            category: "self",
            summary: "SUSE Bug 962994",
            url: "https://bugzilla.suse.com/962994",
         },
         {
            category: "self",
            summary: "SUSE Bug 962995",
            url: "https://bugzilla.suse.com/962995",
         },
         {
            category: "self",
            summary: "SUSE Bug 962997",
            url: "https://bugzilla.suse.com/962997",
         },
         {
            category: "self",
            summary: "SUSE Bug 963000",
            url: "https://bugzilla.suse.com/963000",
         },
         {
            category: "self",
            summary: "SUSE Bug 963002",
            url: "https://bugzilla.suse.com/963002",
         },
         {
            category: "self",
            summary: "SUSE Bug 975496",
            url: "https://bugzilla.suse.com/975496",
         },
         {
            category: "self",
            summary: "SUSE Bug 975981",
            url: "https://bugzilla.suse.com/975981",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-5300 page",
            url: "https://www.suse.com/security/cve/CVE-2015-5300/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7691 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7691/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7692 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7692/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7701 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7701/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7702 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7702/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7703 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7703/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7704 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7704/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7705 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7705/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7848 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7848/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7849 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7849/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7850 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7850/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7851 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7851/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7852 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7852/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7853 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7853/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7854 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7854/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7855 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7855/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7871 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7871/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7973 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7973/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7974 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7974/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7975 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7975/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7976 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7976/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7977 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7977/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7978 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7978/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7979 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7979/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8138 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8138/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8139 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8139/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8140 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8140/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8158 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8158/",
         },
      ],
      title: "Security update for ntp",
      tracking: {
         current_release_date: "2016-05-06T07:50:51Z",
         generator: {
            date: "2016-05-06T07:50:51Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2016:1247-1",
         initial_release_date: "2016-05-06T07:50:51Z",
         revision_history: [
            {
               date: "2016-05-06T07:50:51Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "yast2-ntp-client-3.1.12.4-8.2.noarch",
                        product: {
                           name: "yast2-ntp-client-3.1.12.4-8.2.noarch",
                           product_id: "yast2-ntp-client-3.1.12.4-8.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
                        product: {
                           name: "yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
                           product_id: "yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "ntp-4.2.8p6-46.5.2.ppc64le",
                        product: {
                           name: "ntp-4.2.8p6-46.5.2.ppc64le",
                           product_id: "ntp-4.2.8p6-46.5.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ntp-doc-4.2.8p6-46.5.2.ppc64le",
                        product: {
                           name: "ntp-doc-4.2.8p6-46.5.2.ppc64le",
                           product_id: "ntp-doc-4.2.8p6-46.5.2.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "ntp-4.2.8p6-46.5.2.s390x",
                        product: {
                           name: "ntp-4.2.8p6-46.5.2.s390x",
                           product_id: "ntp-4.2.8p6-46.5.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ntp-doc-4.2.8p6-46.5.2.s390x",
                        product: {
                           name: "ntp-doc-4.2.8p6-46.5.2.s390x",
                           product_id: "ntp-doc-4.2.8p6-46.5.2.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "ntp-4.2.8p6-46.5.2.x86_64",
                        product: {
                           name: "ntp-4.2.8p6-46.5.2.x86_64",
                           product_id: "ntp-4.2.8p6-46.5.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ntp-doc-4.2.8p6-46.5.2.x86_64",
                        product: {
                           name: "ntp-doc-4.2.8p6-46.5.2.x86_64",
                           product_id: "ntp-doc-4.2.8p6-46.5.2.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Desktop 12",
                        product: {
                           name: "SUSE Linux Enterprise Desktop 12",
                           product_id: "SUSE Linux Enterprise Desktop 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sled:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12",
                        product: {
                           name: "SUSE Linux Enterprise Server 12",
                           product_id: "SUSE Linux Enterprise Server 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            },
            product_reference: "ntp-4.2.8p6-46.5.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-doc-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            },
            product_reference: "ntp-doc-4.2.8p6-46.5.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "yast2-ntp-client-3.1.12.4-8.2.noarch as component of SUSE Linux Enterprise Desktop 12",
               product_id: "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            },
            product_reference: "yast2-ntp-client-3.1.12.4-8.2.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Desktop 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch as component of SUSE Linux Enterprise Software Development Kit 12",
               product_id: "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            },
            product_reference: "yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-4.2.8p6-46.5.2.ppc64le as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            },
            product_reference: "ntp-4.2.8p6-46.5.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-4.2.8p6-46.5.2.s390x as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            },
            product_reference: "ntp-4.2.8p6-46.5.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            },
            product_reference: "ntp-4.2.8p6-46.5.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-doc-4.2.8p6-46.5.2.ppc64le as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            },
            product_reference: "ntp-doc-4.2.8p6-46.5.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-doc-4.2.8p6-46.5.2.s390x as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            },
            product_reference: "ntp-doc-4.2.8p6-46.5.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-doc-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            },
            product_reference: "ntp-doc-4.2.8p6-46.5.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "yast2-ntp-client-3.1.12.4-8.2.noarch as component of SUSE Linux Enterprise Server 12",
               product_id: "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            },
            product_reference: "yast2-ntp-client-3.1.12.4-8.2.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-4.2.8p6-46.5.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            },
            product_reference: "ntp-4.2.8p6-46.5.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-4.2.8p6-46.5.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            },
            product_reference: "ntp-4.2.8p6-46.5.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            },
            product_reference: "ntp-4.2.8p6-46.5.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-doc-4.2.8p6-46.5.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            },
            product_reference: "ntp-doc-4.2.8p6-46.5.2.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-doc-4.2.8p6-46.5.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            },
            product_reference: "ntp-doc-4.2.8p6-46.5.2.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ntp-doc-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            },
            product_reference: "ntp-doc-4.2.8p6-46.5.2.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "yast2-ntp-client-3.1.12.4-8.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            },
            product_reference: "yast2-ntp-client-3.1.12.4-8.2.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2015-5300",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-5300",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-5300",
               url: "https://www.suse.com/security/cve/CVE-2015-5300",
            },
            {
               category: "external",
               summary: "SUSE Bug 951629 for CVE-2015-5300",
               url: "https://bugzilla.suse.com/951629",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-5300",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 962624 for CVE-2015-5300",
               url: "https://bugzilla.suse.com/962624",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-5300",
      },
      {
         cve: "CVE-2015-7691",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7691",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7691",
               url: "https://www.suse.com/security/cve/CVE-2015-7691",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7691",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 911792 for CVE-2015-7691",
               url: "https://bugzilla.suse.com/911792",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7691",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7691",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7691",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "important",
            },
         ],
         title: "CVE-2015-7691",
      },
      {
         cve: "CVE-2015-7692",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7692",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7692",
               url: "https://www.suse.com/security/cve/CVE-2015-7692",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7692",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 911792 for CVE-2015-7692",
               url: "https://bugzilla.suse.com/911792",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7692",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7692",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7692",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "important",
            },
         ],
         title: "CVE-2015-7692",
      },
      {
         cve: "CVE-2015-7701",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7701",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7701",
               url: "https://www.suse.com/security/cve/CVE-2015-7701",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7701",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7701",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7701",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7701",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "important",
            },
         ],
         title: "CVE-2015-7701",
      },
      {
         cve: "CVE-2015-7702",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7702",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7702",
               url: "https://www.suse.com/security/cve/CVE-2015-7702",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7702",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 911792 for CVE-2015-7702",
               url: "https://bugzilla.suse.com/911792",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7702",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7702",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7702",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "important",
            },
         ],
         title: "CVE-2015-7702",
      },
      {
         cve: "CVE-2015-7703",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7703",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The \"pidfile\" or \"driftfile\" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7703",
               url: "https://www.suse.com/security/cve/CVE-2015-7703",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7703",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 943216 for CVE-2015-7703",
               url: "https://bugzilla.suse.com/943216",
            },
            {
               category: "external",
               summary: "SUSE Bug 943218 for CVE-2015-7703",
               url: "https://bugzilla.suse.com/943218",
            },
            {
               category: "external",
               summary: "SUSE Bug 943219 for CVE-2015-7703",
               url: "https://bugzilla.suse.com/943219",
            },
            {
               category: "external",
               summary: "SUSE Bug 943221 for CVE-2015-7703",
               url: "https://bugzilla.suse.com/943221",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7703",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7703",
               url: "https://bugzilla.suse.com/959243",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7703",
      },
      {
         cve: "CVE-2015-7704",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7704",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted \"KOD\" messages.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7704",
               url: "https://www.suse.com/security/cve/CVE-2015-7704",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7704",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7704",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 952611 for CVE-2015-7704",
               url: "https://bugzilla.suse.com/952611",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7704",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 977446 for CVE-2015-7704",
               url: "https://bugzilla.suse.com/977446",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "important",
            },
         ],
         title: "CVE-2015-7704",
      },
      {
         cve: "CVE-2015-7705",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7705",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7705",
               url: "https://www.suse.com/security/cve/CVE-2015-7705",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7705",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7705",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 952611 for CVE-2015-7705",
               url: "https://bugzilla.suse.com/952611",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7705",
               url: "https://bugzilla.suse.com/959243",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-7705",
      },
      {
         cve: "CVE-2015-7848",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7848",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7848",
               url: "https://www.suse.com/security/cve/CVE-2015-7848",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7848",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7848",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7848",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7848",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7848",
      },
      {
         cve: "CVE-2015-7849",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7849",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7849",
               url: "https://www.suse.com/security/cve/CVE-2015-7849",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7849",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7849",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7849",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7849",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "important",
            },
         ],
         title: "CVE-2015-7849",
      },
      {
         cve: "CVE-2015-7850",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7850",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7850",
               url: "https://www.suse.com/security/cve/CVE-2015-7850",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7850",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7850",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7850",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7850",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7850",
      },
      {
         cve: "CVE-2015-7851",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7851",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7851",
               url: "https://www.suse.com/security/cve/CVE-2015-7851",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7851",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7851",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7851",
               url: "https://bugzilla.suse.com/959243",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7851",
      },
      {
         cve: "CVE-2015-7852",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7852",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7852",
               url: "https://www.suse.com/security/cve/CVE-2015-7852",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7852",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7852",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7852",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7852",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7852",
      },
      {
         cve: "CVE-2015-7853",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7853",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7853",
               url: "https://www.suse.com/security/cve/CVE-2015-7853",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7853",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7853",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7853",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7853",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-7853",
      },
      {
         cve: "CVE-2015-7854",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7854",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7854",
               url: "https://www.suse.com/security/cve/CVE-2015-7854",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7854",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7854",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7854",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7854",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "important",
            },
         ],
         title: "CVE-2015-7854",
      },
      {
         cve: "CVE-2015-7855",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7855",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7855",
               url: "https://www.suse.com/security/cve/CVE-2015-7855",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7855",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7855",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7855",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 992991 for CVE-2015-7855",
               url: "https://bugzilla.suse.com/992991",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7855",
      },
      {
         cve: "CVE-2015-7871",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7871",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7871",
               url: "https://www.suse.com/security/cve/CVE-2015-7871",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-7871",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-7871",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 952606 for CVE-2015-7871",
               url: "https://bugzilla.suse.com/952606",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7871",
               url: "https://bugzilla.suse.com/959243",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "critical",
            },
         ],
         title: "CVE-2015-7871",
      },
      {
         cve: "CVE-2015-7973",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7973",
            },
         ],
         notes: [
            {
               category: "general",
               text: "NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7973",
               url: "https://www.suse.com/security/cve/CVE-2015-7973",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7973",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 962995 for CVE-2015-7973",
               url: "https://bugzilla.suse.com/962995",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7973",
      },
      {
         cve: "CVE-2015-7974",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7974",
            },
         ],
         notes: [
            {
               category: "general",
               text: "NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7974",
               url: "https://www.suse.com/security/cve/CVE-2015-7974",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7974",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 962960 for CVE-2015-7974",
               url: "https://bugzilla.suse.com/962960",
            },
            {
               category: "external",
               summary: "SUSE Bug 962995 for CVE-2015-7974",
               url: "https://bugzilla.suse.com/962995",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "low",
            },
         ],
         title: "CVE-2015-7974",
      },
      {
         cve: "CVE-2015-7975",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7975",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7975",
               url: "https://www.suse.com/security/cve/CVE-2015-7975",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7975",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 962988 for CVE-2015-7975",
               url: "https://bugzilla.suse.com/962988",
            },
            {
               category: "external",
               summary: "SUSE Bug 962995 for CVE-2015-7975",
               url: "https://bugzilla.suse.com/962995",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "low",
            },
         ],
         title: "CVE-2015-7975",
      },
      {
         cve: "CVE-2015-7976",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7976",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7976",
               url: "https://www.suse.com/security/cve/CVE-2015-7976",
            },
            {
               category: "external",
               summary: "SUSE Bug 962802 for CVE-2015-7976",
               url: "https://bugzilla.suse.com/962802",
            },
            {
               category: "external",
               summary: "SUSE Bug 962995 for CVE-2015-7976",
               url: "https://bugzilla.suse.com/962995",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "low",
            },
         ],
         title: "CVE-2015-7976",
      },
      {
         cve: "CVE-2015-7977",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7977",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7977",
               url: "https://www.suse.com/security/cve/CVE-2015-7977",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7977",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 962970 for CVE-2015-7977",
               url: "https://bugzilla.suse.com/962970",
            },
            {
               category: "external",
               summary: "SUSE Bug 962995 for CVE-2015-7977",
               url: "https://bugzilla.suse.com/962995",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7977",
      },
      {
         cve: "CVE-2015-7978",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7978",
            },
         ],
         notes: [
            {
               category: "general",
               text: "NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7978",
               url: "https://www.suse.com/security/cve/CVE-2015-7978",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7978",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 962970 for CVE-2015-7978",
               url: "https://bugzilla.suse.com/962970",
            },
            {
               category: "external",
               summary: "SUSE Bug 962995 for CVE-2015-7978",
               url: "https://bugzilla.suse.com/962995",
            },
            {
               category: "external",
               summary: "SUSE Bug 963000 for CVE-2015-7978",
               url: "https://bugzilla.suse.com/963000",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7978",
      },
      {
         cve: "CVE-2015-7979",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7979",
            },
         ],
         notes: [
            {
               category: "general",
               text: "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7979",
               url: "https://www.suse.com/security/cve/CVE-2015-7979",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-7979",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 962784 for CVE-2015-7979",
               url: "https://bugzilla.suse.com/962784",
            },
            {
               category: "external",
               summary: "SUSE Bug 962995 for CVE-2015-7979",
               url: "https://bugzilla.suse.com/962995",
            },
            {
               category: "external",
               summary: "SUSE Bug 977459 for CVE-2015-7979",
               url: "https://bugzilla.suse.com/977459",
            },
            {
               category: "external",
               summary: "SUSE Bug 982065 for CVE-2015-7979",
               url: "https://bugzilla.suse.com/982065",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-7979",
      },
      {
         cve: "CVE-2015-8138",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8138",
            },
         ],
         notes: [
            {
               category: "general",
               text: "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8138",
               url: "https://www.suse.com/security/cve/CVE-2015-8138",
            },
            {
               category: "external",
               summary: "SUSE Bug 951608 for CVE-2015-8138",
               url: "https://bugzilla.suse.com/951608",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-8138",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 963002 for CVE-2015-8138",
               url: "https://bugzilla.suse.com/963002",
            },
            {
               category: "external",
               summary: "SUSE Bug 974668 for CVE-2015-8138",
               url: "https://bugzilla.suse.com/974668",
            },
            {
               category: "external",
               summary: "SUSE Bug 977446 for CVE-2015-8138",
               url: "https://bugzilla.suse.com/977446",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-8138",
      },
      {
         cve: "CVE-2015-8139",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8139",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8139",
               url: "https://www.suse.com/security/cve/CVE-2015-8139",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-8139",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-8139",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 962997 for CVE-2015-8139",
               url: "https://bugzilla.suse.com/962997",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-8139",
      },
      {
         cve: "CVE-2015-8140",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8140",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8140",
               url: "https://www.suse.com/security/cve/CVE-2015-8140",
            },
            {
               category: "external",
               summary: "SUSE Bug 1010964 for CVE-2015-8140",
               url: "https://bugzilla.suse.com/1010964",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-8140",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 962994 for CVE-2015-8140",
               url: "https://bugzilla.suse.com/962994",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-8140",
      },
      {
         cve: "CVE-2015-8158",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8158",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
               "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8158",
               url: "https://www.suse.com/security/cve/CVE-2015-8158",
            },
            {
               category: "external",
               summary: "SUSE Bug 959243 for CVE-2015-8158",
               url: "https://bugzilla.suse.com/959243",
            },
            {
               category: "external",
               summary: "SUSE Bug 962966 for CVE-2015-8158",
               url: "https://bugzilla.suse.com/962966",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-05-06T07:50:51Z",
               details: "low",
            },
         ],
         title: "CVE-2015-8158",
      },
   ],
}

cve-2015-7855

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 08:06

Severity ?

Summary

The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.

References

▼	URL	Tags
	https://www.exploit-db.com/exploits/40840/	exploit, x_refsource_EXPLOIT-DB
	http://www.securityfocus.com/bid/77283	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1274264	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug2922	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM
	https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:29.899Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "40840",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/40840/",
               },
               {
                  name: "77283",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77283",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274264",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2922",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-04-15T20:37:11",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "40840",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/40840/",
            },
            {
               name: "77283",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77283",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274264",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2922",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7855",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "40840",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/40840/",
                  },
                  {
                     name: "77283",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77283",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1274264",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274264",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2922",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2922",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                     refsource: "CONFIRM",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7855",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-16T00:00:00",
      dateUpdated: "2024-08-06T08:06:29.899Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7705

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 07:58

Severity ?

Summary

The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://www.ubuntu.com/usn/USN-2783-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/77284	vdb-entry, x_refsource_BID
	https://support.citrix.com/article/CTX220112	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	https://www.cs.bu.edu/~goldbe/NTPattack.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory, x_refsource_SUSE
	https://eprint.iacr.org/2015/1020.pdf	x_refsource_MISC
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1274184	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug2901	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM
	http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html	vendor-advisory, x_refsource_SUSE
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp	vendor-advisory, x_refsource_CISCO
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html	vendor-advisory, x_refsource_SUSE
	https://bto.bluecoat.com/security-advisory/sa103	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/536796/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/536737/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded	mailing-list, x_refsource_BUGTRAQ
	https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11	x_refsource_MISC
	https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:58:59.826Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "SUSE-SU-2016:1912",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  name: "USN-2783-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2783-1",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  name: "77284",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77284",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.citrix.com/article/CTX220112",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
               },
               {
                  name: "SUSE-SU-2016:2094",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://eprint.iacr.org/2015/1020.pdf",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274184",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2901",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html",
               },
               {
                  name: "openSUSE-SU-2016:1329",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html",
               },
               {
                  name: "20151021 Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp",
               },
               {
                  name: "SUSE-SU-2016:1471",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa103",
               },
               {
                  name: "SUSE-SU-2016:1291",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html",
               },
               {
                  name: "SUSE-SU-2016:1568",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html",
               },
               {
                  name: "openSUSE-SU-2015:2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html",
               },
               {
                  name: "SUSE-SU-2016:1278",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html",
               },
               {
                  name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/536796/100/0/threaded",
               },
               {
                  name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded",
               },
               {
                  name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/536737/100/0/threaded",
               },
               {
                  name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-11-05T16:56:48",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "SUSE-SU-2016:1912",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               name: "USN-2783-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2783-1",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               name: "77284",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77284",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.citrix.com/article/CTX220112",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
            },
            {
               name: "SUSE-SU-2016:2094",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://eprint.iacr.org/2015/1020.pdf",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274184",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2901",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html",
            },
            {
               name: "openSUSE-SU-2016:1329",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html",
            },
            {
               name: "20151021 Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp",
            },
            {
               name: "SUSE-SU-2016:1471",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa103",
            },
            {
               name: "SUSE-SU-2016:1291",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html",
            },
            {
               name: "SUSE-SU-2016:1568",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html",
            },
            {
               name: "openSUSE-SU-2015:2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html",
            },
            {
               name: "SUSE-SU-2016:1278",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html",
            },
            {
               name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/536796/100/0/threaded",
            },
            {
               name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded",
            },
            {
               name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/536737/100/0/threaded",
            },
            {
               name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7705",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "SUSE-SU-2016:1912",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "USN-2783-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2783-1",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "77284",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77284",
                  },
                  {
                     name: "https://support.citrix.com/article/CTX220112",
                     refsource: "CONFIRM",
                     url: "https://support.citrix.com/article/CTX220112",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
                     refsource: "MISC",
                     url: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
                  },
                  {
                     name: "SUSE-SU-2016:2094",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
                  },
                  {
                     name: "https://eprint.iacr.org/2015/1020.pdf",
                     refsource: "MISC",
                     url: "https://eprint.iacr.org/2015/1020.pdf",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1274184",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274184",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2901",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2901",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html",
                  },
                  {
                     name: "openSUSE-SU-2016:1329",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html",
                  },
                  {
                     name: "20151021 Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp",
                  },
                  {
                     name: "SUSE-SU-2016:1471",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa103",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa103",
                  },
                  {
                     name: "SUSE-SU-2016:1291",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html",
                  },
                  {
                     name: "SUSE-SU-2016:1568",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html",
                  },
                  {
                     name: "openSUSE-SU-2015:2016",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html",
                  },
                  {
                     name: "SUSE-SU-2016:1278",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html",
                  },
                  {
                     name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/536796/100/0/threaded",
                  },
                  {
                     name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded",
                  },
                  {
                     name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/536737/100/0/threaded",
                  },
                  {
                     name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                     refsource: "MISC",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
                     refsource: "MISC",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
                  },
                  {
                     name: "https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016",
                     refsource: "MISC",
                     url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7705",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-04T00:00:00",
      dateUpdated: "2024-08-06T07:58:59.826Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7974

Vulnerability from cvelistv5

Published

2016-01-26 19:00

Modified

2024-08-06 08:06

Severity ?

Summary

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."

References

▼	URL	Tags
	http://www.talosintel.com/reports/TALOS-2016-0071/	x_refsource_MISC
	http://www.debian.org/security/2016/dsa-3629	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/81960	vdb-entry, x_refsource_BID
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug2936	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
	http://bugs.ntp.org/show_bug.cgi?id=2936	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:31.462Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.talosintel.com/reports/TALOS-2016-0071/",
               },
               {
                  name: "DSA-3629",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3629",
               },
               {
                  name: "81960",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/81960",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2936",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://bugs.ntp.org/show_bug.cgi?id=2936",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-04-15T21:08:19",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.talosintel.com/reports/TALOS-2016-0071/",
            },
            {
               name: "DSA-3629",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3629",
            },
            {
               name: "81960",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/81960",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2936",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://bugs.ntp.org/show_bug.cgi?id=2936",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7974",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://www.talosintel.com/reports/TALOS-2016-0071/",
                     refsource: "MISC",
                     url: "http://www.talosintel.com/reports/TALOS-2016-0071/",
                  },
                  {
                     name: "DSA-3629",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3629",
                  },
                  {
                     name: "81960",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/81960",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2936",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2936",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                  },
                  {
                     name: "http://bugs.ntp.org/show_bug.cgi?id=2936",
                     refsource: "CONFIRM",
                     url: "http://bugs.ntp.org/show_bug.cgi?id=2936",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                     refsource: "MISC",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7974",
      datePublished: "2016-01-26T19:00:00",
      dateReserved: "2015-10-23T00:00:00",
      dateUpdated: "2024-08-06T08:06:31.462Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7691

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 07:58

Severity ?

Summary

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1274254	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/77274	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug2899	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2016-0780.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:58:59.809Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274254",
               },
               {
                  name: "77274",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77274",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2899",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "RHSA-2016:0780",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-17T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274254",
            },
            {
               name: "77274",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77274",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2899",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "RHSA-2016:0780",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7691",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1274254",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274254",
                  },
                  {
                     name: "77274",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77274",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2899",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2899",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "RHSA-2016:0780",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7691",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-04T00:00:00",
      dateUpdated: "2024-08-06T07:58:59.809Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7701

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 07:58

Severity ?

Summary

Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).

References

▼	URL	Tags
	http://support.ntp.org/bin/view/Main/NtpBug2909	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2016-0780.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/77281	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1274255	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:58:59.810Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2909",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "RHSA-2016:0780",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  name: "77281",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77281",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274255",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-17T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2909",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "RHSA-2016:0780",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               name: "77281",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77281",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274255",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7701",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2909",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2909",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "RHSA-2016:0780",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "77281",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77281",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1274255",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274255",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7701",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-04T00:00:00",
      dateUpdated: "2024-08-06T07:58:59.810Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7975

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:06

Severity ?

Summary

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).

References

▼	URL	Tags
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	http://www.ubuntu.com/usn/USN-3096-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/81959	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	http://support.ntp.org/bin/view/Main/NtpBug2937	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:31.469Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
               },
               {
                  name: "USN-3096-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3096-1",
               },
               {
                  name: "SUSE-SU-2016:1177",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
               },
               {
                  name: "81959",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/81959",
               },
               {
                  name: "SUSE-SU-2016:1912",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  name: "openSUSE-SU-2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  name: "SUSE-SU-2016:2094",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
               },
               {
                  name: "SUSE-SU-2016:1175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2937",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa113",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-20T15:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
            },
            {
               name: "USN-3096-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3096-1",
            },
            {
               name: "SUSE-SU-2016:1177",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
            },
            {
               name: "81959",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/81959",
            },
            {
               name: "SUSE-SU-2016:1912",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               name: "openSUSE-SU-2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               name: "SUSE-SU-2016:2094",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
            },
            {
               name: "SUSE-SU-2016:1175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2937",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa113",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7975",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
                  },
                  {
                     name: "USN-3096-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3096-1",
                  },
                  {
                     name: "SUSE-SU-2016:1177",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                  },
                  {
                     name: "81959",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/81959",
                  },
                  {
                     name: "SUSE-SU-2016:1912",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "openSUSE-SU-2016:1292",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "SUSE-SU-2016:2094",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
                  },
                  {
                     name: "SUSE-SU-2016:1175",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2937",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2937",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa113",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa113",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7975",
      datePublished: "2017-01-30T21:00:00",
      dateReserved: "2015-10-23T00:00:00",
      dateUpdated: "2024-08-06T08:06:31.469Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7851

Vulnerability from cvelistv5

Published

2020-01-28 16:35

Modified

2024-08-06 07:59

Severity ?

Summary

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.

References

▼	URL	Tags
	http://www.talosintel.com/reports/TALOS-2015-0062/	x_refsource_MISC
	http://support.ntp.org/bin/view/Main/SecurityNotice	x_refsource_MISC
	http://support.ntp.org/bin/view/Main/NtpBug2918	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:59:00.648Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.talosintel.com/reports/TALOS-2015-0062/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/SecurityNotice",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2918",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-01-28T16:35:21",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.talosintel.com/reports/TALOS-2015-0062/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://support.ntp.org/bin/view/Main/SecurityNotice",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2918",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7851",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://www.talosintel.com/reports/TALOS-2015-0062/",
                     refsource: "MISC",
                     url: "http://www.talosintel.com/reports/TALOS-2015-0062/",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/SecurityNotice",
                     refsource: "MISC",
                     url: "http://support.ntp.org/bin/view/Main/SecurityNotice",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2918",
                     refsource: "MISC",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2918",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7851",
      datePublished: "2020-01-28T16:35:21",
      dateReserved: "2015-10-16T00:00:00",
      dateUpdated: "2024-08-06T07:59:00.648Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7849

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 07:59

Severity ?

Summary

Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1274257	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug2916	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/77276	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:59:00.511Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274257",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2916",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "77276",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77276",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-09T10:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274257",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2916",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "77276",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77276",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7849",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1274257",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274257",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2916",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2916",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "77276",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77276",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7849",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-16T00:00:00",
      dateUpdated: "2024-08-06T07:59:00.511Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8139

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:13

Severity ?

Summary

ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.

References

▼	URL	Tags
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://support.ntp.org/bin/view/Main/NtpBug2946	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/82105	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20200204-0003/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:31.058Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
               },
               {
                  name: "FEDORA-2016-c3bd6a3496",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/",
               },
               {
                  name: "SUSE-SU-2016:1177",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
               },
               {
                  name: "FEDORA-2016-89e0874533",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  name: "openSUSE-SU-2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2946",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  name: "82105",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/82105",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  name: "FEDORA-2016-50b0066b7f",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/",
               },
               {
                  name: "SUSE-SU-2016:1175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa113",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200204-0003/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-02-04T11:06:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
            },
            {
               name: "FEDORA-2016-c3bd6a3496",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/",
            },
            {
               name: "SUSE-SU-2016:1177",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
            },
            {
               name: "FEDORA-2016-89e0874533",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               name: "openSUSE-SU-2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2946",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               name: "82105",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/82105",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               name: "FEDORA-2016-50b0066b7f",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/",
            },
            {
               name: "SUSE-SU-2016:1175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa113",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200204-0003/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8139",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
                  },
                  {
                     name: "FEDORA-2016-c3bd6a3496",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/",
                  },
                  {
                     name: "SUSE-SU-2016:1177",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
                  },
                  {
                     name: "FEDORA-2016-89e0874533",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "openSUSE-SU-2016:1292",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2946",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2946",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "82105",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/82105",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "FEDORA-2016-50b0066b7f",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/",
                  },
                  {
                     name: "SUSE-SU-2016:1175",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa113",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa113",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200204-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200204-0003/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8139",
      datePublished: "2017-01-30T21:00:00",
      dateReserved: "2015-11-13T00:00:00",
      dateUpdated: "2024-08-06T08:13:31.058Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7979

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:06

Severity ?

Summary

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.

References

▼	URL	Tags
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	http://www.ubuntu.com/usn/USN-3096-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3629	vendor-advisory, x_refsource_DEBIAN
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2016:1141	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2016-1552.html	vendor-advisory, x_refsource_REDHAT
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html	vendor-advisory, x_refsource_FEDORA
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/81816	vdb-entry, x_refsource_BID
	http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:31.532Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
               },
               {
                  name: "USN-3096-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3096-1",
               },
               {
                  name: "SUSE-SU-2016:1177",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
               },
               {
                  name: "DSA-3629",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3629",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  name: "RHSA-2016:1141",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2016:1141",
               },
               {
                  name: "SUSE-SU-2016:1912",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  name: "openSUSE-SU-2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  name: "RHSA-2016:1552",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-1552.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
               },
               {
                  name: "FEDORA-2016-8bb1932088",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  name: "81816",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/81816",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
               },
               {
                  name: "FEDORA-2016-34bc10a2c8",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
               },
               {
                  name: "SUSE-SU-2016:2094",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
               },
               {
                  name: "SUSE-SU-2016:1175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa113",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-04-15T20:21:16",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
            },
            {
               name: "USN-3096-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3096-1",
            },
            {
               name: "SUSE-SU-2016:1177",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
            },
            {
               name: "DSA-3629",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3629",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               name: "RHSA-2016:1141",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2016:1141",
            },
            {
               name: "SUSE-SU-2016:1912",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               name: "openSUSE-SU-2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               name: "RHSA-2016:1552",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-1552.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
            },
            {
               name: "FEDORA-2016-8bb1932088",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               name: "81816",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/81816",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
            },
            {
               name: "FEDORA-2016-34bc10a2c8",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
            },
            {
               name: "SUSE-SU-2016:2094",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
            },
            {
               name: "SUSE-SU-2016:1175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa113",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7979",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
                  },
                  {
                     name: "USN-3096-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3096-1",
                  },
                  {
                     name: "SUSE-SU-2016:1177",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
                  },
                  {
                     name: "DSA-3629",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3629",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "RHSA-2016:1141",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2016:1141",
                  },
                  {
                     name: "SUSE-SU-2016:1912",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "openSUSE-SU-2016:1292",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "RHSA-2016:1552",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-1552.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                  },
                  {
                     name: "FEDORA-2016-8bb1932088",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "81816",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/81816",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
                  },
                  {
                     name: "FEDORA-2016-34bc10a2c8",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
                  },
                  {
                     name: "SUSE-SU-2016:2094",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
                  },
                  {
                     name: "SUSE-SU-2016:1175",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa113",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa113",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                     refsource: "MISC",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7979",
      datePublished: "2017-01-30T21:00:00",
      dateReserved: "2015-10-23T00:00:00",
      dateUpdated: "2024-08-06T08:06:31.532Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7853

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 07:59

Severity ?

Summary

The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.

References

▼	URL	Tags
	http://support.ntp.org/bin/view/Main/NtpBug2920	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2783-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=1274262	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/77273	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM
	http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html	x_refsource_MISC
	http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html	x_refsource_MISC
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp	vendor-advisory, x_refsource_CISCO
	https://bto.bluecoat.com/security-advisory/sa103	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/536833/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.talosintel.com/vulnerability-reports/	x_refsource_MISC
	http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/536760/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/536796/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/536737/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded	mailing-list, x_refsource_BUGTRAQ
	https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:59:00.511Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2920",
               },
               {
                  name: "SUSE-SU-2016:1912",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
               },
               {
                  name: "USN-2783-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2783-1",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274262",
               },
               {
                  name: "SUSE-SU-2016:2094",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
               },
               {
                  name: "77273",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77273",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html",
               },
               {
                  name: "20151021 Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa103",
               },
               {
                  name: "20151104 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp [REVISED]",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/536833/100/0/threaded",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.talosintel.com/vulnerability-reports/",
               },
               {
                  name: "openSUSE-SU-2015:2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html",
               },
               {
                  name: "20151104 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp [REVISED]",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded",
               },
               {
                  name: "20151026 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/536760/100/0/threaded",
               },
               {
                  name: "20151026 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded",
               },
               {
                  name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/536796/100/0/threaded",
               },
               {
                  name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded",
               },
               {
                  name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/536737/100/0/threaded",
               },
               {
                  name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-07-16T12:08:50",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2920",
            },
            {
               name: "SUSE-SU-2016:1912",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
            },
            {
               name: "USN-2783-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2783-1",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274262",
            },
            {
               name: "SUSE-SU-2016:2094",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
            },
            {
               name: "77273",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77273",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html",
            },
            {
               name: "20151021 Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa103",
            },
            {
               name: "20151104 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp [REVISED]",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/536833/100/0/threaded",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.talosintel.com/vulnerability-reports/",
            },
            {
               name: "openSUSE-SU-2015:2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html",
            },
            {
               name: "20151104 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp [REVISED]",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded",
            },
            {
               name: "20151026 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/536760/100/0/threaded",
            },
            {
               name: "20151026 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded",
            },
            {
               name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/536796/100/0/threaded",
            },
            {
               name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded",
            },
            {
               name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/536737/100/0/threaded",
            },
            {
               name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7853",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2920",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2920",
                  },
                  {
                     name: "SUSE-SU-2016:1912",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
                  },
                  {
                     name: "USN-2783-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2783-1",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1274262",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274262",
                  },
                  {
                     name: "SUSE-SU-2016:2094",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
                  },
                  {
                     name: "77273",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77273",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html",
                  },
                  {
                     name: "20151021 Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa103",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa103",
                  },
                  {
                     name: "20151104 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp [REVISED]",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/536833/100/0/threaded",
                  },
                  {
                     name: "http://www.talosintel.com/vulnerability-reports/",
                     refsource: "MISC",
                     url: "http://www.talosintel.com/vulnerability-reports/",
                  },
                  {
                     name: "openSUSE-SU-2015:2016",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html",
                  },
                  {
                     name: "20151104 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp [REVISED]",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded",
                  },
                  {
                     name: "20151026 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/536760/100/0/threaded",
                  },
                  {
                     name: "20151026 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded",
                  },
                  {
                     name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/536796/100/0/threaded",
                  },
                  {
                     name: "20151029 [slackware-security] ntp (SSA:2015-302-03)",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded",
                  },
                  {
                     name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/536737/100/0/threaded",
                  },
                  {
                     name: "20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
                     refsource: "MISC",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7853",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-16T00:00:00",
      dateUpdated: "2024-08-06T07:59:00.511Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8138

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:13

Severity ?

Summary

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.

References

▼	URL	Tags
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	http://www.ubuntu.com/usn/USN-3096-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3629	vendor-advisory, x_refsource_DEBIAN
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2016-0063.html	vendor-advisory, x_refsource_REDHAT
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html	vendor-advisory, x_refsource_FEDORA
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20171004-0002/	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd	vendor-advisory, x_refsource_CISCO
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161123-ntpd	vendor-advisory, x_refsource_CISCO
	http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/81811	vdb-entry, x_refsource_BID
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf	x_refsource_CONFIRM
	https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:31.677Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
               },
               {
                  name: "USN-3096-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3096-1",
               },
               {
                  name: "SUSE-SU-2016:1177",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
               },
               {
                  name: "DSA-3629",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3629",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
               },
               {
                  name: "SUSE-SU-2016:1912",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  name: "openSUSE-SU-2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  name: "RHSA-2016:0063",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0063.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
               },
               {
                  name: "FEDORA-2016-8bb1932088",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0002/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  name: "20160428 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd",
               },
               {
                  name: "20161123 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: November 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161123-ntpd",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
               },
               {
                  name: "FEDORA-2016-34bc10a2c8",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
               },
               {
                  name: "SUSE-SU-2016:2094",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
               },
               {
                  name: "SUSE-SU-2016:1175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
               },
               {
                  name: "81811",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/81811",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa113",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-11-05T17:23:16",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
            },
            {
               name: "USN-3096-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3096-1",
            },
            {
               name: "SUSE-SU-2016:1177",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
            },
            {
               name: "DSA-3629",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3629",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
            },
            {
               name: "SUSE-SU-2016:1912",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               name: "openSUSE-SU-2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               name: "RHSA-2016:0063",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0063.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
            },
            {
               name: "FEDORA-2016-8bb1932088",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0002/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               name: "20160428 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd",
            },
            {
               name: "20161123 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: November 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161123-ntpd",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
            },
            {
               name: "FEDORA-2016-34bc10a2c8",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
            },
            {
               name: "SUSE-SU-2016:2094",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
            },
            {
               name: "SUSE-SU-2016:1175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
            },
            {
               name: "81811",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/81811",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa113",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8138",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
                  },
                  {
                     name: "USN-3096-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3096-1",
                  },
                  {
                     name: "SUSE-SU-2016:1177",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
                  },
                  {
                     name: "DSA-3629",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3629",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                  },
                  {
                     name: "SUSE-SU-2016:1912",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "openSUSE-SU-2016:1292",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "RHSA-2016:0063",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0063.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                  },
                  {
                     name: "FEDORA-2016-8bb1932088",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0002/",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "20160428 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd",
                  },
                  {
                     name: "20161123 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: November 2016",
                     refsource: "CISCO",
                     url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161123-ntpd",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
                  },
                  {
                     name: "FEDORA-2016-34bc10a2c8",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
                  },
                  {
                     name: "SUSE-SU-2016:2094",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
                  },
                  {
                     name: "SUSE-SU-2016:1175",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
                  },
                  {
                     name: "81811",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/81811",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa113",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa113",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                     refsource: "MISC",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
                  },
                  {
                     name: "https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19",
                     refsource: "MISC",
                     url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8138",
      datePublished: "2017-01-30T21:00:00",
      dateReserved: "2015-11-13T00:00:00",
      dateUpdated: "2024-08-06T08:13:31.677Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7871

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 08:06

Severity ?

Summary

Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.

References

▼	URL	Tags
	http://support.ntp.org/bin/view/Main/NtpBug2941	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1274265	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/77287	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201604-03	vendor-advisory, x_refsource_GENTOO
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM
	https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:30.223Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2941",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274265",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  name: "77287",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77287",
               },
               {
                  name: "GLSA-201604-03",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201604-03",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-04-13T11:06:36",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2941",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274265",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               name: "77287",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77287",
            },
            {
               name: "GLSA-201604-03",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201604-03",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7871",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2941",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2941",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1274265",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274265",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "77287",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77287",
                  },
                  {
                     name: "GLSA-201604-03",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201604-03",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7871",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-19T00:00:00",
      dateUpdated: "2024-08-06T08:06:30.223Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7692

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 07:58

Severity ?

Summary

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1274254	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/77285	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug2899	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2016-0780.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:58:59.892Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274254",
               },
               {
                  name: "77285",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77285",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2899",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "RHSA-2016:0780",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-17T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274254",
            },
            {
               name: "77285",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77285",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2899",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "RHSA-2016:0780",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7692",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1274254",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274254",
                  },
                  {
                     name: "77285",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77285",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2899",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2899",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "RHSA-2016:0780",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7692",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-04T00:00:00",
      dateUpdated: "2024-08-06T07:58:59.892Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8140

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:13

Severity ?

Summary

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.

References

▼	URL	Tags
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	http://support.ntp.org/bin/view/Main/NtpBug2947	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20200204-0003/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:31.109Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
               },
               {
                  name: "SUSE-SU-2016:1177",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  name: "openSUSE-SU-2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  name: "SUSE-SU-2016:1175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2947",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa113",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200204-0003/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-02-04T11:05:59",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
            },
            {
               name: "SUSE-SU-2016:1177",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               name: "openSUSE-SU-2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               name: "SUSE-SU-2016:1175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2947",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa113",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200204-0003/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8140",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
                  },
                  {
                     name: "SUSE-SU-2016:1177",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "openSUSE-SU-2016:1292",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "SUSE-SU-2016:1175",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2947",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2947",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa113",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa113",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200204-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200204-0003/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8140",
      datePublished: "2017-01-30T21:00:00",
      dateReserved: "2015-11-13T00:00:00",
      dateUpdated: "2024-08-06T08:13:31.109Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7854

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 08:06

Severity ?

Summary

Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.

References

▼	URL	Tags
	http://support.ntp.org/bin/view/Main/NtpBug2921	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1274263	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/77277	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:30.240Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2921",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274263",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "77277",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77277",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-09T10:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2921",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274263",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "77277",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77277",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7854",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2921",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2921",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1274263",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274263",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "77277",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77277",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7854",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-16T00:00:00",
      dateUpdated: "2024-08-06T08:06:30.240Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7976

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:06

Severity ?

Summary

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

References

▼	URL	Tags
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	http://www.ubuntu.com/usn/USN-3096-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://support.ntp.org/bin/view/Main/NtpBug2938	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:31.303Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
               },
               {
                  name: "USN-3096-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3096-1",
               },
               {
                  name: "SUSE-SU-2016:1177",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
               },
               {
                  name: "SUSE-SU-2016:1912",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  name: "openSUSE-SU-2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2938",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  name: "SUSE-SU-2016:2094",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
               },
               {
                  name: "SUSE-SU-2016:1175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa113",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-20T15:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
            },
            {
               name: "USN-3096-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3096-1",
            },
            {
               name: "SUSE-SU-2016:1177",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
            },
            {
               name: "SUSE-SU-2016:1912",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               name: "openSUSE-SU-2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2938",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               name: "SUSE-SU-2016:2094",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
            },
            {
               name: "SUSE-SU-2016:1175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa113",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7976",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
                  },
                  {
                     name: "USN-3096-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3096-1",
                  },
                  {
                     name: "SUSE-SU-2016:1177",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
                  },
                  {
                     name: "SUSE-SU-2016:1912",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "openSUSE-SU-2016:1292",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2938",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2938",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "SUSE-SU-2016:2094",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
                  },
                  {
                     name: "SUSE-SU-2016:1175",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa113",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa113",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7976",
      datePublished: "2017-01-30T21:00:00",
      dateReserved: "2015-10-23T00:00:00",
      dateUpdated: "2024-08-06T08:06:31.303Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8158

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:13

Severity ?

Summary

The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.

References

▼	URL	Tags
	http://www.debian.org/security/2016/dsa-3629	vendor-advisory, x_refsource_DEBIAN
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/81814	vdb-entry, x_refsource_BID
	https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug2948	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:13:32.449Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "DSA-3629",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3629",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  name: "81814",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/81814",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2948",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-17T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "DSA-3629",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3629",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               name: "81814",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/81814",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2948",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-8158",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "DSA-3629",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3629",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "81814",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/81814",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2948",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2948",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-8158",
      datePublished: "2017-01-30T21:00:00",
      dateReserved: "2015-11-13T00:00:00",
      dateUpdated: "2024-08-06T08:13:32.449Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7850

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 07:59

Severity ?

Summary

ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	http://support.ntp.org/bin/view/Main/NtpBug2917	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1274258	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/77279	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:59:00.457Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2917",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274258",
               },
               {
                  name: "77279",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77279",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-09T10:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2917",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274258",
            },
            {
               name: "77279",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77279",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7850",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2917",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2917",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1274258",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1274258",
                  },
                  {
                     name: "77279",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77279",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7850",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-16T00:00:00",
      dateUpdated: "2024-08-06T07:59:00.457Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7702

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 07:58

Severity ?

Summary

References

▼	URL	Tags
	http://www.securityfocus.com/bid/77286	vdb-entry, x_refsource_BID
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug2899	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2016-0780.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:58:59.680Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "77286",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77286",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2899",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "RHSA-2016:0780",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-17T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "77286",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77286",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2899",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "RHSA-2016:0780",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7702",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "77286",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77286",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2899",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2899",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "RHSA-2016:0780",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7702",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-04T00:00:00",
      dateUpdated: "2024-08-06T07:58:59.680Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7852

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 07:59

Severity ?

Summary

ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.

References

▼	URL	Tags
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug2919	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/77288	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2016-0780.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:59:00.644Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2919",
               },
               {
                  name: "77288",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77288",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "RHSA-2016:0780",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-17T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2919",
            },
            {
               name: "77288",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77288",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "RHSA-2016:0780",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7852",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2919",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2919",
                  },
                  {
                     name: "77288",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77288",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "RHSA-2016:0780",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7852",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-16T00:00:00",
      dateUpdated: "2024-08-06T07:59:00.644Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7978

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:06

Severity ?

Summary

NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.

References

▼	URL	Tags
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	http://www.ubuntu.com/usn/USN-3096-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3629	vendor-advisory, x_refsource_DEBIAN
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html	vendor-advisory, x_refsource_FEDORA
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2016-0780.html	vendor-advisory, x_refsource_REDHAT
	http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/81962	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:31.406Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
               },
               {
                  name: "USN-3096-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3096-1",
               },
               {
                  name: "SUSE-SU-2016:1177",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
               },
               {
                  name: "DSA-3629",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3629",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  name: "SUSE-SU-2016:1912",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  name: "openSUSE-SU-2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  name: "FEDORA-2016-8bb1932088",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  name: "RHSA-2016:0780",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
               },
               {
                  name: "FEDORA-2016-34bc10a2c8",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
               },
               {
                  name: "SUSE-SU-2016:2094",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
               },
               {
                  name: "81962",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/81962",
               },
               {
                  name: "SUSE-SU-2016:1175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa113",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-17T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
            },
            {
               name: "USN-3096-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3096-1",
            },
            {
               name: "SUSE-SU-2016:1177",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
            },
            {
               name: "DSA-3629",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3629",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               name: "SUSE-SU-2016:1912",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               name: "openSUSE-SU-2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               name: "FEDORA-2016-8bb1932088",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               name: "RHSA-2016:0780",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
            },
            {
               name: "FEDORA-2016-34bc10a2c8",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
            },
            {
               name: "SUSE-SU-2016:2094",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
            },
            {
               name: "81962",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/81962",
            },
            {
               name: "SUSE-SU-2016:1175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa113",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7978",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
                  },
                  {
                     name: "USN-3096-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3096-1",
                  },
                  {
                     name: "SUSE-SU-2016:1177",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
                  },
                  {
                     name: "DSA-3629",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3629",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "SUSE-SU-2016:1912",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "openSUSE-SU-2016:1292",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "FEDORA-2016-8bb1932088",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "RHSA-2016:0780",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
                  },
                  {
                     name: "FEDORA-2016-34bc10a2c8",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
                  },
                  {
                     name: "SUSE-SU-2016:2094",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
                  },
                  {
                     name: "81962",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/81962",
                  },
                  {
                     name: "SUSE-SU-2016:1175",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa113",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa113",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7978",
      datePublished: "2017-01-30T21:00:00",
      dateReserved: "2015-10-23T00:00:00",
      dateUpdated: "2024-08-06T08:06:31.406Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7977

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:06

Severity ?

Summary

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.

References

▼	URL	Tags
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	http://www.ubuntu.com/usn/USN-3096-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	http://www.debian.org/security/2016/dsa-3629	vendor-advisory, x_refsource_DEBIAN
	http://support.ntp.org/bin/view/Main/NtpBug2939	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html	vendor-advisory, x_refsource_FEDORA
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/81815	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2016-0780.html	vendor-advisory, x_refsource_REDHAT
	http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:31.485Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
               },
               {
                  name: "USN-3096-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3096-1",
               },
               {
                  name: "SUSE-SU-2016:1177",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
               },
               {
                  name: "DSA-3629",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3629",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2939",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  name: "SUSE-SU-2016:1912",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  name: "openSUSE-SU-2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  name: "FEDORA-2016-8bb1932088",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
               },
               {
                  name: "81815",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/81815",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  name: "RHSA-2016:0780",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
               },
               {
                  name: "FEDORA-2016-34bc10a2c8",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
               },
               {
                  name: "SUSE-SU-2016:2094",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
               },
               {
                  name: "SUSE-SU-2016:1175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa113",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-04-15T20:33:14",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
            },
            {
               name: "USN-3096-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3096-1",
            },
            {
               name: "SUSE-SU-2016:1177",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
            },
            {
               name: "DSA-3629",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3629",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2939",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               name: "SUSE-SU-2016:1912",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               name: "openSUSE-SU-2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               name: "FEDORA-2016-8bb1932088",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
            },
            {
               name: "81815",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/81815",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               name: "RHSA-2016:0780",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
            },
            {
               name: "FEDORA-2016-34bc10a2c8",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
            },
            {
               name: "SUSE-SU-2016:2094",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
            },
            {
               name: "SUSE-SU-2016:1175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa113",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7977",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
                  },
                  {
                     name: "USN-3096-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3096-1",
                  },
                  {
                     name: "SUSE-SU-2016:1177",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
                  },
                  {
                     name: "DSA-3629",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3629",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2939",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2939",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "SUSE-SU-2016:1912",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "openSUSE-SU-2016:1292",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "FEDORA-2016-8bb1932088",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                  },
                  {
                     name: "81815",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/81815",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "RHSA-2016:0780",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security",
                  },
                  {
                     name: "FEDORA-2016-34bc10a2c8",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
                  },
                  {
                     name: "SUSE-SU-2016:2094",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
                  },
                  {
                     name: "SUSE-SU-2016:1175",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa113",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa113",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                     refsource: "CONFIRM",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7977",
      datePublished: "2017-01-30T21:00:00",
      dateReserved: "2015-10-23T00:00:00",
      dateUpdated: "2024-08-06T08:06:31.485Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7704

Vulnerability from cvelistv5

Published

2017-08-07 20:00

Modified

2024-08-06 07:58

Severity ?

Summary

The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1271070	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-1930.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/77280	vdb-entry, x_refsource_BID
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://bugs.ntp.org/show_bug.cgi?id=2901	x_refsource_CONFIRM
	https://support.citrix.com/article/CTX220112	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20171004-0002/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	https://www.cs.bu.edu/~goldbe/NTPattack.html	x_refsource_MISC
	https://eprint.iacr.org/2015/1020.pdf	x_refsource_MISC
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-2520.html	vendor-advisory, x_refsource_REDHAT
	http://support.ntp.org/bin/view/Main/NtpBug2901	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10284	x_refsource_CONFIRM
	https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:58:59.543Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271070",
               },
               {
                  name: "RHSA-2015:1930",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-1930.html",
               },
               {
                  name: "77280",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77280",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://bugs.ntp.org/show_bug.cgi?id=2901",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.citrix.com/article/CTX220112",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0002/",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://eprint.iacr.org/2015/1020.pdf",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
               },
               {
                  name: "RHSA-2015:2520",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-2520.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2901",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted \"KOD\" messages.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-11-05T16:55:25",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271070",
            },
            {
               name: "RHSA-2015:1930",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-1930.html",
            },
            {
               name: "77280",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77280",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://bugs.ntp.org/show_bug.cgi?id=2901",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.citrix.com/article/CTX220112",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0002/",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://eprint.iacr.org/2015/1020.pdf",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
            },
            {
               name: "RHSA-2015:2520",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-2520.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2901",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7704",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted \"KOD\" messages.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1271070",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271070",
                  },
                  {
                     name: "RHSA-2015:1930",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-1930.html",
                  },
                  {
                     name: "77280",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77280",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "http://bugs.ntp.org/show_bug.cgi?id=2901",
                     refsource: "CONFIRM",
                     url: "http://bugs.ntp.org/show_bug.cgi?id=2901",
                  },
                  {
                     name: "https://support.citrix.com/article/CTX220112",
                     refsource: "CONFIRM",
                     url: "https://support.citrix.com/article/CTX220112",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0002/",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
                     refsource: "MISC",
                     url: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
                  },
                  {
                     name: "https://eprint.iacr.org/2015/1020.pdf",
                     refsource: "MISC",
                     url: "https://eprint.iacr.org/2015/1020.pdf",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
                  },
                  {
                     name: "RHSA-2015:2520",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-2520.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2901",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2901",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
                  {
                     name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",
                     refsource: "CONFIRM",
                     url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",
                  },
                  {
                     name: "https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016",
                     refsource: "MISC",
                     url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7704",
      datePublished: "2017-08-07T20:00:00",
      dateReserved: "2015-10-04T00:00:00",
      dateUpdated: "2024-08-06T07:58:59.543Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7703

Vulnerability from cvelistv5

Published

2017-07-24 14:00

Modified

2024-08-06 07:59

Severity ?

Summary

The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.

References

▼	URL	Tags
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/77278	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-0780.html	vendor-advisory, x_refsource_REDHAT
	http://support.ntp.org/bin/view/Main/NtpBug2902	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1254547	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:59:00.096Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
               },
               {
                  name: "RHSA-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  name: "77278",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77278",
               },
               {
                  name: "RHSA-2016:0780",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2902",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1254547",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The \"pidfile\" or \"driftfile\" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-05-17T16:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
            },
            {
               name: "RHSA-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               name: "77278",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77278",
            },
            {
               name: "RHSA-2016:0780",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2902",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1254547",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7703",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The \"pidfile\" or \"driftfile\" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
                  },
                  {
                     name: "RHSA-2016:2583",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2583.html",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "77278",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77278",
                  },
                  {
                     name: "RHSA-2016:0780",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-0780.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2902",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2902",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1254547",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1254547",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7703",
      datePublished: "2017-07-24T14:00:00",
      dateReserved: "2015-10-04T00:00:00",
      dateUpdated: "2024-08-06T07:59:00.096Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-5300

Vulnerability from cvelistv5

Published

2017-07-21 14:00

Modified

2024-08-06 06:41

Severity ?

Summary

The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-1930.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://seclists.org/bugtraq/2016/Feb/164	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2783-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	https://ics-cert.us-cert.gov/advisories/ICSA-15-356-01	x_refsource_MISC
	https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p5_Securit	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1271076	x_refsource_CONFIRM
	https://www-01.ibm.com/support/docview.wss?uid=swg21980676	x_refsource_CONFIRM
	https://support.citrix.com/article/CTX220112	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html	vendor-advisory, x_refsource_FEDORA
	https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099428	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170684.html	vendor-advisory, x_refsource_FEDORA
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	https://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	x_refsource_CONFIRM
	http://aix.software.ibm.com/aix/efixes/security/ntp_advisory5.asc	x_refsource_CONFIRM
	https://www.cs.bu.edu/~goldbe/NTPattack.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id/1034670	vdb-entry, x_refsource_SECTRACK
	https://www-01.ibm.com/support/docview.wss?uid=isg3T1024073	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/77312	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	https://www.freebsd.org/security/advisories/FreeBSD-SA-16:02.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://www-01.ibm.com/support/docview.wss?uid=swg21979393	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www-01.ibm.com/support/docview.wss?uid=nas8N1021264	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	https://www-01.ibm.com/support/docview.wss?uid=isg3T1023885	x_refsource_CONFIRM
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	https://www-01.ibm.com/support/docview.wss?uid=swg21983501	x_refsource_CONFIRM
	https://www-01.ibm.com/support/docview.wss?uid=ssg1S1005821	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug2956	x_refsource_CONFIRM
	https://www-01.ibm.com/support/docview.wss?uid=swg21983506	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T06:41:09.519Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:1930",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-1930.html",
               },
               {
                  name: "SUSE-SU:2016:1912",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
               },
               {
                  name: "[slackware-security] 20160223 ntp (SSA:2016-054-04)",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/bugtraq/2016/Feb/164",
               },
               {
                  name: "openSUSE-SU:2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
               },
               {
                  name: "USN-2783-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2783-1",
               },
               {
                  name: "SUSE-SU:2016:1177",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://ics-cert.us-cert.gov/advisories/ICSA-15-356-01",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p5_Securit",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271076",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www-01.ibm.com/support/docview.wss?uid=swg21980676",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.citrix.com/article/CTX220112",
               },
               {
                  name: "FEDORA-2015-77bfbc1bcd",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099428",
               },
               {
                  name: "FEDORA-2015-f5f5ec7b6b",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170684.html",
               },
               {
                  name: "DSA-3388",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3388",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://aix.software.ibm.com/aix/efixes/security/ntp_advisory5.asc",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
               },
               {
                  name: "SUSE-SU:2016:2094",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
               },
               {
                  name: "FEDORA-2016-34bc10a2c8",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
               },
               {
                  name: "1034670",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034670",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www-01.ibm.com/support/docview.wss?uid=isg3T1024073",
               },
               {
                  name: "77312",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77312",
               },
               {
                  name: "SUSE-SU:2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  name: "FreeBSD-SA-16:02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://www.freebsd.org/security/advisories/FreeBSD-SA-16:02.ntp.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www-01.ibm.com/support/docview.wss?uid=swg21979393",
               },
               {
                  name: "openSUSE-SU:2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www-01.ibm.com/support/docview.wss?uid=nas8N1021264",
               },
               {
                  name: "SUSE-SU:2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www-01.ibm.com/support/docview.wss?uid=isg3T1023885",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa113",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www-01.ibm.com/support/docview.wss?uid=swg21983501",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www-01.ibm.com/support/docview.wss?uid=ssg1S1005821",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2956",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www-01.ibm.com/support/docview.wss?uid=swg21983506",
               },
               {
                  name: "SUSE-SU:2016:1175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-13T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-09T10:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "RHSA-2015:1930",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-1930.html",
            },
            {
               name: "SUSE-SU:2016:1912",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
            },
            {
               name: "[slackware-security] 20160223 ntp (SSA:2016-054-04)",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://seclists.org/bugtraq/2016/Feb/164",
            },
            {
               name: "openSUSE-SU:2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
            },
            {
               name: "USN-2783-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2783-1",
            },
            {
               name: "SUSE-SU:2016:1177",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://ics-cert.us-cert.gov/advisories/ICSA-15-356-01",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p5_Securit",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271076",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www-01.ibm.com/support/docview.wss?uid=swg21980676",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.citrix.com/article/CTX220112",
            },
            {
               name: "FEDORA-2015-77bfbc1bcd",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099428",
            },
            {
               name: "FEDORA-2015-f5f5ec7b6b",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170684.html",
            },
            {
               name: "DSA-3388",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3388",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://aix.software.ibm.com/aix/efixes/security/ntp_advisory5.asc",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
            },
            {
               name: "SUSE-SU:2016:2094",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
            },
            {
               name: "FEDORA-2016-34bc10a2c8",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
            },
            {
               name: "1034670",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034670",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www-01.ibm.com/support/docview.wss?uid=isg3T1024073",
            },
            {
               name: "77312",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77312",
            },
            {
               name: "SUSE-SU:2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               name: "FreeBSD-SA-16:02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://www.freebsd.org/security/advisories/FreeBSD-SA-16:02.ntp.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www-01.ibm.com/support/docview.wss?uid=swg21979393",
            },
            {
               name: "openSUSE-SU:2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www-01.ibm.com/support/docview.wss?uid=nas8N1021264",
            },
            {
               name: "SUSE-SU:2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www-01.ibm.com/support/docview.wss?uid=isg3T1023885",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa113",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www-01.ibm.com/support/docview.wss?uid=swg21983501",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www-01.ibm.com/support/docview.wss?uid=ssg1S1005821",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2956",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www-01.ibm.com/support/docview.wss?uid=swg21983506",
            },
            {
               name: "SUSE-SU:2016:1175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2015-5300",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2015:1930",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-1930.html",
                  },
                  {
                     name: "SUSE-SU:2016:1912",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
                  },
                  {
                     name: "[slackware-security] 20160223 ntp (SSA:2016-054-04)",
                     refsource: "MLIST",
                     url: "http://seclists.org/bugtraq/2016/Feb/164",
                  },
                  {
                     name: "openSUSE-SU:2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
                  },
                  {
                     name: "USN-2783-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2783-1",
                  },
                  {
                     name: "SUSE-SU:2016:1177",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
                  },
                  {
                     name: "https://ics-cert.us-cert.gov/advisories/ICSA-15-356-01",
                     refsource: "MISC",
                     url: "https://ics-cert.us-cert.gov/advisories/ICSA-15-356-01",
                  },
                  {
                     name: "https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                     refsource: "CONFIRM",
                     url: "https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p5_Securit",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p5_Securit",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1271076",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1271076",
                  },
                  {
                     name: "https://www-01.ibm.com/support/docview.wss?uid=swg21980676",
                     refsource: "CONFIRM",
                     url: "https://www-01.ibm.com/support/docview.wss?uid=swg21980676",
                  },
                  {
                     name: "https://support.citrix.com/article/CTX220112",
                     refsource: "CONFIRM",
                     url: "https://support.citrix.com/article/CTX220112",
                  },
                  {
                     name: "FEDORA-2015-77bfbc1bcd",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html",
                  },
                  {
                     name: "https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099428",
                     refsource: "CONFIRM",
                     url: "https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099428",
                  },
                  {
                     name: "FEDORA-2015-f5f5ec7b6b",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170684.html",
                  },
                  {
                     name: "DSA-3388",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3388",
                  },
                  {
                     name: "https://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                     refsource: "CONFIRM",
                     url: "https://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html",
                  },
                  {
                     name: "http://aix.software.ibm.com/aix/efixes/security/ntp_advisory5.asc",
                     refsource: "CONFIRM",
                     url: "http://aix.software.ibm.com/aix/efixes/security/ntp_advisory5.asc",
                  },
                  {
                     name: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
                     refsource: "MISC",
                     url: "https://www.cs.bu.edu/~goldbe/NTPattack.html",
                  },
                  {
                     name: "SUSE-SU:2016:2094",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
                  },
                  {
                     name: "FEDORA-2016-34bc10a2c8",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html",
                  },
                  {
                     name: "1034670",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034670",
                  },
                  {
                     name: "https://www-01.ibm.com/support/docview.wss?uid=isg3T1024073",
                     refsource: "CONFIRM",
                     url: "https://www-01.ibm.com/support/docview.wss?uid=isg3T1024073",
                  },
                  {
                     name: "77312",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77312",
                  },
                  {
                     name: "SUSE-SU:2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "FreeBSD-SA-16:02",
                     refsource: "FREEBSD",
                     url: "https://www.freebsd.org/security/advisories/FreeBSD-SA-16:02.ntp.asc",
                  },
                  {
                     name: "https://www-01.ibm.com/support/docview.wss?uid=swg21979393",
                     refsource: "CONFIRM",
                     url: "https://www-01.ibm.com/support/docview.wss?uid=swg21979393",
                  },
                  {
                     name: "openSUSE-SU:2016:1292",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
                  },
                  {
                     name: "https://www-01.ibm.com/support/docview.wss?uid=nas8N1021264",
                     refsource: "CONFIRM",
                     url: "https://www-01.ibm.com/support/docview.wss?uid=nas8N1021264",
                  },
                  {
                     name: "SUSE-SU:2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "https://www-01.ibm.com/support/docview.wss?uid=isg3T1023885",
                     refsource: "CONFIRM",
                     url: "https://www-01.ibm.com/support/docview.wss?uid=isg3T1023885",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa113",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa113",
                  },
                  {
                     name: "https://www-01.ibm.com/support/docview.wss?uid=swg21983501",
                     refsource: "CONFIRM",
                     url: "https://www-01.ibm.com/support/docview.wss?uid=swg21983501",
                  },
                  {
                     name: "https://www-01.ibm.com/support/docview.wss?uid=ssg1S1005821",
                     refsource: "CONFIRM",
                     url: "https://www-01.ibm.com/support/docview.wss?uid=ssg1S1005821",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2956",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2956",
                  },
                  {
                     name: "https://www-01.ibm.com/support/docview.wss?uid=swg21983506",
                     refsource: "CONFIRM",
                     url: "https://www-01.ibm.com/support/docview.wss?uid=swg21983506",
                  },
                  {
                     name: "SUSE-SU:2016:1175",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-5300",
      datePublished: "2017-07-21T14:00:00",
      dateReserved: "2015-07-01T00:00:00",
      dateUpdated: "2024-08-06T06:41:09.519Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7973

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:06

Severity ?

Summary

NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.

References

▼	URL	Tags
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	http://www.ubuntu.com/usn/USN-3096-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html	vendor-advisory, x_refsource_SUSE
	http://support.ntp.org/bin/view/Main/NtpBug2935	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/81963	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:06:31.462Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
               },
               {
                  name: "USN-3096-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3096-1",
               },
               {
                  name: "SUSE-SU-2016:1177",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
               },
               {
                  name: "SUSE-SU-2016:1912",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.ntp.org/bin/view/Main/NtpBug2935",
               },
               {
                  name: "1034782",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034782",
               },
               {
                  name: "openSUSE-SU-2016:1292",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
               },
               {
                  name: "VU#718152",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/718152",
               },
               {
                  name: "SUSE-SU-2016:1247",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
               },
               {
                  name: "SUSE-SU-2016:1311",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
               },
               {
                  name: "81963",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/81963",
               },
               {
                  name: "SUSE-SU-2016:2094",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
               },
               {
                  name: "SUSE-SU-2016:1175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
               },
               {
                  name: "FreeBSD-SA-16:09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa113",
               },
               {
                  name: "openSUSE-SU-2016:1423",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-20T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-04-15T20:40:17",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
            },
            {
               name: "USN-3096-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3096-1",
            },
            {
               name: "SUSE-SU-2016:1177",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
            },
            {
               name: "SUSE-SU-2016:1912",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.ntp.org/bin/view/Main/NtpBug2935",
            },
            {
               name: "1034782",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034782",
            },
            {
               name: "openSUSE-SU-2016:1292",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
            },
            {
               name: "VU#718152",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/718152",
            },
            {
               name: "SUSE-SU-2016:1247",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
            },
            {
               name: "SUSE-SU-2016:1311",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
            },
            {
               name: "81963",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/81963",
            },
            {
               name: "SUSE-SU-2016:2094",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
            },
            {
               name: "SUSE-SU-2016:1175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
            },
            {
               name: "FreeBSD-SA-16:09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa113",
            },
            {
               name: "openSUSE-SU-2016:1423",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7973",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd",
                  },
                  {
                     name: "USN-3096-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3096-1",
                  },
                  {
                     name: "SUSE-SU-2016:1177",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us",
                  },
                  {
                     name: "SUSE-SU-2016:1912",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html",
                  },
                  {
                     name: "http://support.ntp.org/bin/view/Main/NtpBug2935",
                     refsource: "CONFIRM",
                     url: "http://support.ntp.org/bin/view/Main/NtpBug2935",
                  },
                  {
                     name: "1034782",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1034782",
                  },
                  {
                     name: "openSUSE-SU-2016:1292",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html",
                  },
                  {
                     name: "VU#718152",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/718152",
                  },
                  {
                     name: "SUSE-SU-2016:1247",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171031-0001/",
                  },
                  {
                     name: "SUSE-SU-2016:1311",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html",
                  },
                  {
                     name: "81963",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/81963",
                  },
                  {
                     name: "SUSE-SU-2016:2094",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html",
                  },
                  {
                     name: "SUSE-SU-2016:1175",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html",
                  },
                  {
                     name: "FreeBSD-SA-16:09",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa113",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa113",
                  },
                  {
                     name: "openSUSE-SU-2016:1423",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
                  },
                  {
                     name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                     refsource: "CONFIRM",
                     url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7973",
      datePublished: "2017-01-30T21:00:00",
      dateReserved: "2015-10-23T00:00:00",
      dateUpdated: "2024-08-06T08:06:31.462Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7848

Vulnerability from cvelistv5

Published

2017-01-06 21:00

Modified

2024-08-06 07:59

Severity ?

Summary

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/77275	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1033951	vdb-entry, x_refsource_SECTRACK
	http://www.talosintelligence.com/reports/TALOS-2015-0052/	x_refsource_MISC
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:59:00.544Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "77275",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/77275",
               },
               {
                  name: "1033951",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033951",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.talosintelligence.com/reports/TALOS-2015-0052/",
               },
               {
                  name: "GLSA-201607-15",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201607-15",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-10-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-11-09T10:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "77275",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/77275",
            },
            {
               name: "1033951",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033951",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.talosintelligence.com/reports/TALOS-2015-0052/",
            },
            {
               name: "GLSA-201607-15",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201607-15",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-7848",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "77275",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/77275",
                  },
                  {
                     name: "1033951",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033951",
                  },
                  {
                     name: "http://www.talosintelligence.com/reports/TALOS-2015-0052/",
                     refsource: "MISC",
                     url: "http://www.talosintelligence.com/reports/TALOS-2015-0052/",
                  },
                  {
                     name: "GLSA-201607-15",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201607-15",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20171004-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-7848",
      datePublished: "2017-01-06T21:00:00",
      dateReserved: "2015-10-16T00:00:00",
      dateUpdated: "2024-08-06T07:59:00.544Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature