CVE-2015-7852

ntp: ntpq atoascii memory corruption vulnerability

Published Aug 7, 2017 CVSS 3.1 · 5.9 Medium EPSS 12.3% KEV · Not listed
Description
ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-335-1 ntp security update
Debian DSA Debian DSA DSA-3388-1 ntp security update
EUVD EUVD EUVD-2015-7750 ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.
Ubuntu USN Ubuntu USN USN-2783-1 NTP vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.0317}

epss

{'score': 0.03255}