9.8

CVE-2015-7871

Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ntp ≫ Ntp Version >= 4.2.6 < 4.2.8
Ntp ≫ Ntp Version >= 4.3.0 < 4.3.77
Ntp ≫ Ntp Version 4.2.5 Update p186
Ntp ≫ Ntp Version 4.2.5 Update p187
Ntp ≫ Ntp Version 4.2.5 Update p188
Ntp ≫ Ntp Version 4.2.5 Update p189
Ntp ≫ Ntp Version 4.2.5 Update p190
Ntp ≫ Ntp Version 4.2.5 Update p191
Ntp ≫ Ntp Version 4.2.5 Update p192
Ntp ≫ Ntp Version 4.2.5 Update p193
Ntp ≫ Ntp Version 4.2.5 Update p194
Ntp ≫ Ntp Version 4.2.5 Update p195
Ntp ≫ Ntp Version 4.2.5 Update p196
Ntp ≫ Ntp Version 4.2.5 Update p197
Ntp ≫ Ntp Version 4.2.5 Update p198
Ntp ≫ Ntp Version 4.2.5 Update p199
Ntp ≫ Ntp Version 4.2.5 Update p200
Ntp ≫ Ntp Version 4.2.5 Update p201
Ntp ≫ Ntp Version 4.2.5 Update p202
Ntp ≫ Ntp Version 4.2.5 Update p203
Ntp ≫ Ntp Version 4.2.5 Update p204
Ntp ≫ Ntp Version 4.2.5 Update p205
Ntp ≫ Ntp Version 4.2.5 Update p206
Ntp ≫ Ntp Version 4.2.5 Update p207
Ntp ≫ Ntp Version 4.2.5 Update p208
Ntp ≫ Ntp Version 4.2.5 Update p209
Ntp ≫ Ntp Version 4.2.5 Update p210
Ntp ≫ Ntp Version 4.2.5 Update p211
Ntp ≫ Ntp Version 4.2.5 Update p212
Ntp ≫ Ntp Version 4.2.5 Update p213
Ntp ≫ Ntp Version 4.2.5 Update p214
Ntp ≫ Ntp Version 4.2.5 Update p215
Ntp ≫ Ntp Version 4.2.5 Update p216
Ntp ≫ Ntp Version 4.2.5 Update p217
Ntp ≫ Ntp Version 4.2.5 Update p218
Ntp ≫ Ntp Version 4.2.5 Update p219
Ntp ≫ Ntp Version 4.2.5 Update p220
Ntp ≫ Ntp Version 4.2.5 Update p221
Ntp ≫ Ntp Version 4.2.5 Update p222
Ntp ≫ Ntp Version 4.2.5 Update p223
Ntp ≫ Ntp Version 4.2.5 Update p224
Ntp ≫ Ntp Version 4.2.5 Update p225
Ntp ≫ Ntp Version 4.2.5 Update p226
Ntp ≫ Ntp Version 4.2.5 Update p227
Ntp ≫ Ntp Version 4.2.5 Update p228
Ntp ≫ Ntp Version 4.2.5 Update p229
Ntp ≫ Ntp Version 4.2.5 Update p230
Ntp ≫ Ntp Version 4.2.5 Update p231_rc1
Ntp ≫ Ntp Version 4.2.5 Update p232_rc1
Ntp ≫ Ntp Version 4.2.5 Update p233_rc1
Ntp ≫ Ntp Version 4.2.5 Update p234_rc1
Ntp ≫ Ntp Version 4.2.5 Update p235_rc1
Ntp ≫ Ntp Version 4.2.5 Update p236_rc1
Ntp ≫ Ntp Version 4.2.5 Update p237_rc1
Ntp ≫ Ntp Version 4.2.5 Update p238_rc1
Ntp ≫ Ntp Version 4.2.5 Update p239_rc1
Ntp ≫ Ntp Version 4.2.5 Update p240_rc1
Ntp ≫ Ntp Version 4.2.5 Update p241_rc1
Ntp ≫ Ntp Version 4.2.5 Update p242_rc1
Ntp ≫ Ntp Version 4.2.5 Update p243_rc1
Ntp ≫ Ntp Version 4.2.5 Update p244_rc1
Ntp ≫ Ntp Version 4.2.5 Update p245_rc1
Ntp ≫ Ntp Version 4.2.5 Update p246_rc1
Ntp ≫ Ntp Version 4.2.5 Update p247_rc1
Ntp ≫ Ntp Version 4.2.5 Update p248_rc1
Ntp ≫ Ntp Version 4.2.5 Update p249_rc1
Ntp ≫ Ntp Version 4.2.5 Update p250_rc1
Ntp ≫ Ntp Version 4.2.8 Update p1
Ntp ≫ Ntp Version 4.2.8 Update p1-beta1
Ntp ≫ Ntp Version 4.2.8 Update p1-beta2
Ntp ≫ Ntp Version 4.2.8 Update p1-beta3
Ntp ≫ Ntp Version 4.2.8 Update p1-beta4
Ntp ≫ Ntp Version 4.2.8 Update p1-beta5
Ntp ≫ Ntp Version 4.2.8 Update p1-rc1
Ntp ≫ Ntp Version 4.2.8 Update p1-rc2
Ntp ≫ Ntp Version 4.2.8 Update p2
Ntp ≫ Ntp Version 4.2.8 Update p2-rc1
Ntp ≫ Ntp Version 4.2.8 Update p2-rc2
Ntp ≫ Ntp Version 4.2.8 Update p2-rc3
Ntp ≫ Ntp Version 4.2.8 Update p3
Ntp ≫ Ntp Version 4.2.8 Update p3-rc1
Ntp ≫ Ntp Version 4.2.8 Update p3-rc2
Ntp ≫ Ntp Version 4.2.8 Update p3-rc3
Debian ≫ Debian Linux Version 7.0
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Netapp ≫ Oncommand Balance Version -
Netapp ≫ Oncommand Unified Manager Version - SwPlatform clustered_data_ontap
Netapp ≫ Data Ontap Version - SwPlatform 7-mode
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 81.76% 0.996
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://security.gentoo.org/glsa/201604-03
Third Party Advisory
VDB Entry
http://www.debian.org/security/2015/dsa-3388
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf
https://security.gentoo.org/glsa/201607-15
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1033951
Third Party Advisory
VDB Entry
https://security.netapp.com/advisory/ntap-20171004-0001/
Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839
Third Party Advisory
VDB Entry
http://support.ntp.org/bin/view/Main/NtpBug2941
Vendor Advisory
http://www.securityfocus.com/bid/77287
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1274265
Third Party Advisory
VDB Entry
Issue Tracking