CVE-2015-7850
CVE-2015-7850
This page contains facts from public vulnerability sources. Check the original advisory before updating.
ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.
CVSS 6.5 · Medium · EPSS 5.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ntp Debian:11
- Affected ranges
- ECOSYSTEM: < 1:4.2.8p4+dfsg-1
Update to 1:4.2.8p4+dfsg-1
ntp Ubuntu:14.04:LTS
- Versions
- 1:4.2.6.p5+dfsg-3ubuntu2
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.1
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.2
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.3
- Affected ranges
- ECOSYSTEM: < 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5
Update to 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5
Original sources
- http://www.securitytracker.com/id/1033951
- http://www.debian.org/security/2015/dsa-3388
- http://support.ntp.org/bin/view/Main/NtpBug2917
- https://bugzilla.redhat.com/show_bug.cgi?id=1274258
- http://www.securityfocus.com/bid/77279
- https://security.gentoo.org/glsa/201607-15
- https://security.netapp.com/advisory/ntap-20171004-0001/
- https://nvd.nist.gov/vuln/detail/CVE-2015-7850