NetSight
medium5.9

CVE-2015-7852

ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.

Impact

ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.

Affected products

VendorProductAffected versions
NtpNtp
from 4.2.0 before 4.2.8
from 4.3.0 before 4.3.77
Version 4.2.8
DebianDebian Linux
Versions 7.0, 8.0, 9.0
NetappOncommand Balance
All versions
NetappOncommand Performance Manager
All versions
NetappOncommand Unified Manager
All versions
NetappClustered Data Ontap
All versions
NetappData Ontap
All versions
OracleLinux
Version 6
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5, 7.6, 7.7

Weakness classification

References