5.9

CVE-2015-7977

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ntp ≫ Ntp Version <= 4.2.8
Ntp ≫ Ntp Version >= 4.3.0 < 4.3.90
Ntp ≫ Ntp Version 4.2.8 Update -
Ntp ≫ Ntp Version 4.2.8 Update p1
Ntp ≫ Ntp Version 4.2.8 Update p1-beta1
Ntp ≫ Ntp Version 4.2.8 Update p1-beta2
Ntp ≫ Ntp Version 4.2.8 Update p1-beta3
Ntp ≫ Ntp Version 4.2.8 Update p1-beta4
Ntp ≫ Ntp Version 4.2.8 Update p1-beta5
Ntp ≫ Ntp Version 4.2.8 Update p1-rc1
Ntp ≫ Ntp Version 4.2.8 Update p1-rc2
Ntp ≫ Ntp Version 4.2.8 Update p2
Ntp ≫ Ntp Version 4.2.8 Update p2-rc1
Ntp ≫ Ntp Version 4.2.8 Update p2-rc2
Ntp ≫ Ntp Version 4.2.8 Update p2-rc3
Ntp ≫ Ntp Version 4.2.8 Update p3
Ntp ≫ Ntp Version 4.2.8 Update p3-rc1
Ntp ≫ Ntp Version 4.2.8 Update p3-rc2
Ntp ≫ Ntp Version 4.2.8 Update p3-rc3
Ntp ≫ Ntp Version 4.2.8 Update p4
Ntp ≫ Ntp Version 4.2.8 Update p5
Oracle ≫ Linux Version 6 Update -
Siemens ≫ Tim 4r-ie Dnp3 Firmware Version -
   Siemens ≫ Tim 4r-ie Dnp3 Version -
Netapp ≫ Oncommand Balance Version -
Freebsd ≫ Freebsd Version 9.3 Update -
Freebsd ≫ Freebsd Version 9.3 Update p1
Freebsd ≫ Freebsd Version 9.3 Update p10
Freebsd ≫ Freebsd Version 9.3 Update p12
Freebsd ≫ Freebsd Version 9.3 Update p13
Freebsd ≫ Freebsd Version 9.3 Update p16
Freebsd ≫ Freebsd Version 9.3 Update p19
Freebsd ≫ Freebsd Version 9.3 Update p2
Freebsd ≫ Freebsd Version 9.3 Update p20
Freebsd ≫ Freebsd Version 9.3 Update p21
Freebsd ≫ Freebsd Version 9.3 Update p22
Freebsd ≫ Freebsd Version 9.3 Update p23
Freebsd ≫ Freebsd Version 9.3 Update p24
Freebsd ≫ Freebsd Version 9.3 Update p25
Freebsd ≫ Freebsd Version 9.3 Update p28
Freebsd ≫ Freebsd Version 9.3 Update p3
Freebsd ≫ Freebsd Version 9.3 Update p30
Freebsd ≫ Freebsd Version 9.3 Update p31
Freebsd ≫ Freebsd Version 9.3 Update p32
Freebsd ≫ Freebsd Version 9.3 Update p33
Freebsd ≫ Freebsd Version 9.3 Update p34
Freebsd ≫ Freebsd Version 9.3 Update p5
Freebsd ≫ Freebsd Version 9.3 Update p6
Freebsd ≫ Freebsd Version 9.3 Update p7
Freebsd ≫ Freebsd Version 9.3 Update p8
Freebsd ≫ Freebsd Version 9.3 Update p9
Freebsd ≫ Freebsd Version 10.1 Update -
Freebsd ≫ Freebsd Version 10.1 Update p1
Freebsd ≫ Freebsd Version 10.1 Update p10
Freebsd ≫ Freebsd Version 10.1 Update p12
Freebsd ≫ Freebsd Version 10.1 Update p15
Freebsd ≫ Freebsd Version 10.1 Update p16
Freebsd ≫ Freebsd Version 10.1 Update p17
Freebsd ≫ Freebsd Version 10.1 Update p18
Freebsd ≫ Freebsd Version 10.1 Update p19
Freebsd ≫ Freebsd Version 10.1 Update p2
Freebsd ≫ Freebsd Version 10.1 Update p22
Freebsd ≫ Freebsd Version 10.1 Update p24
Freebsd ≫ Freebsd Version 10.1 Update p25
Freebsd ≫ Freebsd Version 10.1 Update p26
Freebsd ≫ Freebsd Version 10.1 Update p27
Freebsd ≫ Freebsd Version 10.1 Update p3
Freebsd ≫ Freebsd Version 10.1 Update p4
Freebsd ≫ Freebsd Version 10.1 Update p5
Freebsd ≫ Freebsd Version 10.1 Update p6
Freebsd ≫ Freebsd Version 10.1 Update p7
Freebsd ≫ Freebsd Version 10.1 Update p8
Freebsd ≫ Freebsd Version 10.1 Update p9
Freebsd ≫ Freebsd Version 10.2 Update -
Freebsd ≫ Freebsd Version 10.2 Update p1
Freebsd ≫ Freebsd Version 10.2 Update p10
Freebsd ≫ Freebsd Version 10.2 Update p2
Freebsd ≫ Freebsd Version 10.2 Update p5
Freebsd ≫ Freebsd Version 10.2 Update p7
Freebsd ≫ Freebsd Version 10.2 Update p8
Freebsd ≫ Freebsd Version 10.2 Update p9
Fedoraproject ≫ Fedora Version 22
Fedoraproject ≫ Fedora Version 23
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.35% 0.928
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2583.html
Broken Link
http://www.debian.org/security/2016/dsa-3629
Third Party Advisory
http://www.securitytracker.com/id/1034782
Third Party Advisory
VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf
Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc
Third Party Advisory
https://security.gentoo.org/glsa/201607-15
Third Party Advisory
https://security.netapp.com/advisory/ntap-20171031-0001/
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11
Third Party Advisory
US Government Resource
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
Broken Link
http://www.ubuntu.com/usn/USN-3096-1
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html
Broken Link
https://www.kb.cert.org/vuls/id/718152
Third Party Advisory
US Government Resource
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html
Broken Link
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd
Third Party Advisory
https://bto.bluecoat.com/security-advisory/sa113
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0780.html
Broken Link
http://support.ntp.org/bin/view/Main/NtpBug2939
Vendor Advisory
http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
Vendor Advisory
http://www.securityfocus.com/bid/81815
Third Party Advisory
VDB Entry