7.5

CVE-2015-7704

The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ntp ≫ Ntp Version >= 4.2.0 < 4.2.8
Ntp ≫ Ntp Version >= 4.3.0 < 4.3.77
Ntp ≫ Ntp Version4.2.8 Update-
Ntp ≫ Ntp Version4.2.8 Updatep1
Ntp ≫ Ntp Version4.2.8 Updatep1-beta1
Ntp ≫ Ntp Version4.2.8 Updatep1-beta2
Ntp ≫ Ntp Version4.2.8 Updatep1-beta3
Ntp ≫ Ntp Version4.2.8 Updatep1-beta4
Ntp ≫ Ntp Version4.2.8 Updatep1-beta5
Ntp ≫ Ntp Version4.2.8 Updatep1-rc1
Ntp ≫ Ntp Version4.2.8 Updatep1-rc2
Ntp ≫ Ntp Version4.2.8 Updatep2
Ntp ≫ Ntp Version4.2.8 Updatep2-rc1
Ntp ≫ Ntp Version4.2.8 Updatep2-rc2
Ntp ≫ Ntp Version4.2.8 Updatep2-rc3
Ntp ≫ Ntp Version4.2.8 Updatep3
Ntp ≫ Ntp Version4.2.8 Updatep3-rc1
Ntp ≫ Ntp Version4.2.8 Updatep3-rc2
Ntp ≫ Ntp Version4.2.8 Updatep3-rc3
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Netapp ≫ Oncommand Unified Manager Version- SwPlatformclustered_data_ontap
Netapp ≫ Data Ontap Version- SwPlatform7-mode
Mcafee ≫ Enterprise Security Manager Version < 10.4.0
Mcafee ≫ Enterprise Security Manager Version >= 11.0.0 < 11.2.0
Citrix ≫ Xenserver Version6.0.2
Citrix ≫ Xenserver Version6.2.0 Update-
Citrix ≫ Xenserver Version6.5 Update-
Citrix ≫ Xenserver Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 22.61% 0.957
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://security.gentoo.org/glsa/201607-15
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1033951
Third Party Advisory
VDB Entry
https://www.kb.cert.org/vuls/id/718152
Third Party Advisory
US Government Resource
http://bugs.ntp.org/show_bug.cgi?id=2901
Vendor Advisory
Issue Tracking
http://www.securityfocus.com/bid/77280
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1271070
Third Party Advisory
VDB Entry
Issue Tracking
https://eprint.iacr.org/2015/1020.pdf
Third Party Advisory
Technical Description