6.5

CVE-2015-7973

NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ntp ≫ Ntp Version < 4.2.8
Ntp ≫ Ntp Version >= 4.3.0 < 4.3.90
Ntp ≫ Ntp Version 4.2.8 Update -
Ntp ≫ Ntp Version 4.2.8 Update p1
Ntp ≫ Ntp Version 4.2.8 Update p1-beta1
Ntp ≫ Ntp Version 4.2.8 Update p1-beta2
Ntp ≫ Ntp Version 4.2.8 Update p1-beta3
Ntp ≫ Ntp Version 4.2.8 Update p1-beta4
Ntp ≫ Ntp Version 4.2.8 Update p1-beta5
Ntp ≫ Ntp Version 4.2.8 Update p1-rc1
Ntp ≫ Ntp Version 4.2.8 Update p1-rc2
Ntp ≫ Ntp Version 4.2.8 Update p2
Ntp ≫ Ntp Version 4.2.8 Update p2-rc1
Ntp ≫ Ntp Version 4.2.8 Update p2-rc2
Ntp ≫ Ntp Version 4.2.8 Update p2-rc3
Ntp ≫ Ntp Version 4.2.8 Update p3
Ntp ≫ Ntp Version 4.2.8 Update p3-rc1
Ntp ≫ Ntp Version 4.2.8 Update p3-rc2
Ntp ≫ Ntp Version 4.2.8 Update p3-rc3
Ntp ≫ Ntp Version 4.2.8 Update p4
Ntp ≫ Ntp Version 4.2.8 Update p5
Siemens ≫ Tim 4r-ie Firmware
   Siemens ≫ Tim 4r-ie Version -
Freebsd ≫ Freebsd Version >= 10.0 < 10.1
Freebsd ≫ Freebsd Version 9.3 Update -
Freebsd ≫ Freebsd Version 9.3 Update p1
Freebsd ≫ Freebsd Version 9.3 Update p10
Freebsd ≫ Freebsd Version 9.3 Update p12
Freebsd ≫ Freebsd Version 9.3 Update p13
Freebsd ≫ Freebsd Version 9.3 Update p16
Freebsd ≫ Freebsd Version 9.3 Update p19
Freebsd ≫ Freebsd Version 9.3 Update p2
Freebsd ≫ Freebsd Version 9.3 Update p20
Freebsd ≫ Freebsd Version 9.3 Update p21
Freebsd ≫ Freebsd Version 9.3 Update p22
Freebsd ≫ Freebsd Version 9.3 Update p23
Freebsd ≫ Freebsd Version 9.3 Update p24
Freebsd ≫ Freebsd Version 9.3 Update p25
Freebsd ≫ Freebsd Version 9.3 Update p3
Freebsd ≫ Freebsd Version 9.3 Update p5
Freebsd ≫ Freebsd Version 9.3 Update p6
Freebsd ≫ Freebsd Version 9.3 Update p7
Freebsd ≫ Freebsd Version 9.3 Update p8
Freebsd ≫ Freebsd Version 9.3 Update p9
Freebsd ≫ Freebsd Version 10.1 Update -
Freebsd ≫ Freebsd Version 10.1 Update p1
Freebsd ≫ Freebsd Version 10.1 Update p10
Freebsd ≫ Freebsd Version 10.1 Update p12
Freebsd ≫ Freebsd Version 10.1 Update p15
Freebsd ≫ Freebsd Version 10.1 Update p16
Freebsd ≫ Freebsd Version 10.1 Update p17
Freebsd ≫ Freebsd Version 10.1 Update p18
Freebsd ≫ Freebsd Version 10.1 Update p19
Freebsd ≫ Freebsd Version 10.1 Update p2
Freebsd ≫ Freebsd Version 10.1 Update p22
Freebsd ≫ Freebsd Version 10.1 Update p24
Freebsd ≫ Freebsd Version 10.1 Update p25
Freebsd ≫ Freebsd Version 10.1 Update p26
Freebsd ≫ Freebsd Version 10.1 Update p27
Freebsd ≫ Freebsd Version 10.1 Update p3
Freebsd ≫ Freebsd Version 10.1 Update p4
Freebsd ≫ Freebsd Version 10.1 Update p5
Freebsd ≫ Freebsd Version 10.1 Update p6
Freebsd ≫ Freebsd Version 10.1 Update p7
Freebsd ≫ Freebsd Version 10.1 Update p8
Freebsd ≫ Freebsd Version 10.1 Update p9
Freebsd ≫ Freebsd Version 10.2 Update -
Freebsd ≫ Freebsd Version 10.2 Update p1
Freebsd ≫ Freebsd Version 10.2 Update p10
Freebsd ≫ Freebsd Version 10.2 Update p2
Freebsd ≫ Freebsd Version 10.2 Update p5
Freebsd ≫ Freebsd Version 10.2 Update p7
Freebsd ≫ Freebsd Version 10.2 Update p8
Freebsd ≫ Freebsd Version 10.2 Update p9
Netapp ≫ Oncommand Balance Version -
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.36% 0.873
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.2 4.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:N/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securitytracker.com/id/1034782
Third Party Advisory
VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf
Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us
Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us
Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc
Third Party Advisory
https://security.gentoo.org/glsa/201607-15
Third Party Advisory
https://security.netapp.com/advisory/ntap-20171031-0001/
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11
Third Party Advisory
US Government Resource
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
Broken Link
http://www.ubuntu.com/usn/USN-3096-1
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html
Broken Link
https://www.kb.cert.org/vuls/id/718152
Third Party Advisory
US Government Resource
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html
Broken Link
http://support.ntp.org/bin/view/Main/NtpBug2935
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd
Third Party Advisory
http://www.securityfocus.com/bid/81963
Third Party Advisory
VDB Entry
https://bto.bluecoat.com/security-advisory/sa113
Third Party Advisory