NetSight
IP …
high7.5

CVE-2015-7978

NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which trigger…

Impact

NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.

Affected products

VendorProductAffected versions
NtpNtp
through 4.2.8
Versions 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4

Weakness classification

CWE-400

References