CVE-2015-7976 : The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

Published 2017-01-30 21:59:00

Updated 2018-10-30 16:27:38

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2015-7976

Novell » Suse Openstack Cloud » Version: 5
cpe:2.3:o:novell:suse_openstack_cloud:5:*:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Desktop » Version: 12
cpe:2.3:o:suse:linux_enterprise_desktop:12:*:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Desktop » Version: 12 Update SP1
cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Server » Version: 10 Update SP4 Ltss Edition
cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*
Matching versions
Suse » Linux Enterprise Server » Version: 11 Update SP2 Ltss Edition
cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
Matching versions
Suse » Linux Enterprise Server » Version: 12 Update SP1
cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Server » Version: 11 Update SP4
cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Server » Version: 11 Update SP3 Ltss Edition
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*
Matching versions
Suse » Suse Linux Enterprise Server » Version: 12
cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*
Matching versions
Suse » Manager » Version: 2.1
cpe:2.3:a:suse:manager:2.1:*:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Debuginfo » Version: 11 Update SP2
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Debuginfo » Version: 11 Update SP4
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
Matching versions
Suse » Linux Enterprise Debuginfo » Version: 11 Update SP3
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*
Matching versions
Suse » Manager Proxy » Version: 2.1
cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Update P5
Versions up to, including, (<=) 4.2.8
cpe:2.3:a:ntp:ntp:*:p5:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.1.2
cpe:2.3:a:ntp:ntp:4.1.2:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.0
cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.1
cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.8
cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.9
cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.6
cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.7
cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.2
cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.3
cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.10
cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.11
cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.4
cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.5
cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.13
cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.14
cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.20
cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.21
cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.28
cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.29
cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.36
cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.37
cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.43
cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.44
cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.51
cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.52
cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.59
cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.66
cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.67
cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.74
cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.75
cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.81
cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.82
cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.89
cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.17
cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.18
cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.24
cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.25
cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.32
cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.33
cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.40
cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.47
cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.48
cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.55
cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.56
cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.62
cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.63
cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.70
cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.78
cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.79
cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.85
cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.86
cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.12
cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.19
cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.26
cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.27
cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.34
cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.35
cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.41
cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.42
cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.49
cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.50
cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.57
cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.58
cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.64
cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.65
cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.71
cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.72
cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.73
cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.80
cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.87
cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.88
cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.15
cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.16
cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.22
cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.23
cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.30
cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.31
cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.38
cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.39
cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.45
cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.46
cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.53
cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.54
cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.60
cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.61
cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.68
cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.69
cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.76
cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.77
cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.83
cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.3.84
cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*
Matching versions
Opensuse » Opensuse » Version: 13.2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 42.1
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2015-7976

EPSS FAQ

0.39%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 70 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-7976

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:P/A:N	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
4.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	2.8	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None

CWE ids for CVE-2015-7976

CWE-254

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-7976

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html

[security-announce] SUSE-SU-2016:1175-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1034782

ntp Multiple Flaws Let Remote Users Spoof Messages, Obtain Potentially Sensitive Information, and Deny Service - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
https://bto.bluecoat.com/security-advisory/sa113

SA113 : January 2016 NTP Security Vulnerabilities
Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/201607-15

NTP: Multiple vulnerabilities (GLSA 201607-15) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://security.netapp.com/advisory/ntap-20171031-0001/

January 2016 Network Time Protocol Daemon (ntpd) Vulnerabilities in NetApp Products | NetApp Product Security

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html

[security-announce] SUSE-SU-2016:1177-1: important: Security update for
Third Party Advisory

CVEs referencing this url
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html

[security-announce] openSUSE-SU-2016:1292-1: important: Security update
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html

[security-announce] SUSE-SU-2016:1311-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html

[security-announce] SUSE-SU-2016:1912-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html

[security-announce] SUSE-SU-2016:2094-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://support.ntp.org/bin/view/Main/NtpBug2938

NtpBug2938 < Main < NTP
Vendor Advisory
https://www.kb.cert.org/vuls/id/718152

VU#718152 - NTP.org ntpd contains multiple vulnerabilities
Third Party Advisory;US Government Resource

CVEs referencing this url
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd

Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: January 2016
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-3096-1

USN-3096-1: NTP vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html

openSUSE-SU-2016:1423-1: moderate: Security update for ntp
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html

[security-announce] SUSE-SU-2016:1247-1: important: Security update for
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2015-7976

Products affected by CVE-2015-7976

Exploit prediction scoring system (EPSS) score for CVE-2015-7976

CVSS scores for CVE-2015-7976

CWE ids for CVE-2015-7976

References for CVE-2015-7976