NetSight
IP …
medium5.9

CVE-2015-7977

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.

Impact

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.

Affected products

VendorProductAffected versions
NtpNtp
through 4.2.8
from 4.3.0 before 4.3.90
Version 4.2.8
OracleLinux
Version 6
SiemensTim 4r-Ie Firmware
All versions
SiemensTim 4r-Ie Dnp3 Firmware
All versions
NetappClustered Data Ontap
All versions
NetappOncommand Balance
All versions
FreebsdFreebsd
Versions 9.3, 10.1, 10.2
FedoraprojectFedora
Versions 22, 23
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04

Weakness classification

CWE-476

References