CVE-2015-7853 : The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attacker

The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.

Published 2017-08-07 20:29:01

Updated 2021-07-16 13:15:08

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute codeDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2015-7853

EPSS FAQ

7.28%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 93 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-7853

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2015-7853

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-7853

http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded

Bugtraq

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html

openSUSE-SU-2015:2016-1: moderate: Security update for ntp - openSUSE Updates - openSUSE Mailing Lists

CVEs referencing this url
http://www.ubuntu.com/usn/USN-2783-1

USN-2783-1: NTP vulnerabilities | Ubuntu security notices

CVEs referencing this url
http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html
https://bugzilla.redhat.com/show_bug.cgi?id=1274262

1274262 – (CVE-2015-7853) CVE-2015-7853 ntp: reference clock memory corruption vulnerability
Issue Tracking;Third Party Advisory;VDB Entry
http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded

Bugtraq

CVEs referencing this url
http://www.securityfocus.com/archive/1/536796/100/0/threaded

Bugtraq

CVEs referencing this url
https://bto.bluecoat.com/security-advisory/sa103

Broadcom Support Portal

CVEs referencing this url
https://security.gentoo.org/glsa/201607-15

NTP: Multiple vulnerabilities (GLSA 201607-15) — Gentoo security
Third Party Advisory;VDB Entry

CVEs referencing this url
http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html

Slackware Security Advisory - ntp Updates ≈ Packet Storm

CVEs referencing this url
http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded
http://www.talosintel.com/vulnerability-reports/
http://www.securityfocus.com/archive/1/536760/100/0/threaded
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp

Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015

CVEs referencing this url
http://www.securityfocus.com/bid/77273

Network Time Protocol CVE-2015-7853 Local Buffer Overflow Vulnerability
Third Party Advisory;VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html

[security-announce] SUSE-SU-2016:1311-1: important: Security update for

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html

[security-announce] SUSE-SU-2016:1912-1: important: Security update for

CVEs referencing this url
https://security.netapp.com/advisory/ntap-20171004-0001/

October 2015 Network Time Protocol Daemon (ntpd) Vulnerabilities in Multiple NetApp Products | NetApp Product Security
Third Party Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1033951

ntp Multiple Flaws Let Remote Users Deny Service, View Files, and Bypass Authentication to Modify the Time - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html

[security-announce] SUSE-SU-2016:2094-1: important: Security update for

CVEs referencing this url
https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

CVEs referencing this url
http://www.securityfocus.com/archive/1/536833/100/0/threaded
http://support.ntp.org/bin/view/Main/NtpBug2920

NtpBug2920 < Main < NTP
Patch;Vendor Advisory
http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded
http://www.securityfocus.com/archive/1/536737/100/0/threaded

Bugtraq

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html

openSUSE-SU-2016:1423-1: moderate: Security update for ntp

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html

[security-announce] SUSE-SU-2016:1247-1: important: Security update for

CVEs referencing this url
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

Siemens SIMATIC NET CP 443-1 OPC UA | CISA

CVEs referencing this url

Products affected by CVE-2015-7853

NTP » NTP
Versions from including (>=) 4.3.0 and before (<) 4.3.77
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
Matching versions
NTP » NTP
Versions from including (>=) 4.2.0 and before (<) 4.2.8
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta1
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta2
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta3
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta4
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta5
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc3
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc3
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
Matching versions
Netapp » Data Ontap » Version: N/A For 7-mode
cpe:2.3:o:netapp:data_ontap:-:*:*:*:*:7-mode:*:*
Matching versions
Netapp » Oncommand Balance » Version: N/A
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: N/A
cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
Matching versions
Netapp » Oncommand Unified Manager » Version: N/A For Clustered Data Ontap
cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:clustered_data_ontap:*:*
Matching versions
Netapp » Oncommand Performance Manager » Version: N/A
cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*
Matching versions

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!

Accept Close

Vulnerability Details : CVE-2015-7853

Exploit prediction scoring system (EPSS) score for CVE-2015-7853

CVSS scores for CVE-2015-7853

CWE ids for CVE-2015-7853

References for CVE-2015-7853

Products affected by CVE-2015-7853