CVE-2015-7977 : ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to ca

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.

Published 2017-01-30 21:59:00

Updated 2022-02-01 18:13:02

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2015-7977

Freebsd » Freebsd » Version: 9.3 Update P10
cpe:2.3:o:freebsd:freebsd:9.3:p10:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P12
cpe:2.3:o:freebsd:freebsd:9.3:p12:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P13
cpe:2.3:o:freebsd:freebsd:9.3:p13:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P16
cpe:2.3:o:freebsd:freebsd:9.3:p16:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P15
cpe:2.3:o:freebsd:freebsd:10.1:p15:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P16
cpe:2.3:o:freebsd:freebsd:10.1:p16:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P2
cpe:2.3:o:freebsd:freebsd:10.1:p2:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P3
cpe:2.3:o:freebsd:freebsd:10.1:p3:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3
cpe:2.3:o:freebsd:freebsd:9.3:-:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P2
cpe:2.3:o:freebsd:freebsd:9.3:p2:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P3
cpe:2.3:o:freebsd:freebsd:9.3:p3:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P1
cpe:2.3:o:freebsd:freebsd:10.1:p1:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P12
cpe:2.3:o:freebsd:freebsd:10.1:p12:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P4
cpe:2.3:o:freebsd:freebsd:10.1:p4:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P6
cpe:2.3:o:freebsd:freebsd:10.1:p6:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P6
cpe:2.3:o:freebsd:freebsd:9.3:p6:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P7
cpe:2.3:o:freebsd:freebsd:9.3:p7:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P8
cpe:2.3:o:freebsd:freebsd:9.3:p8:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P9
cpe:2.3:o:freebsd:freebsd:9.3:p9:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P8
cpe:2.3:o:freebsd:freebsd:10.1:p8:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P9
cpe:2.3:o:freebsd:freebsd:10.1:p9:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2
cpe:2.3:o:freebsd:freebsd:10.2:-:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P1
cpe:2.3:o:freebsd:freebsd:9.3:p1:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P19
cpe:2.3:o:freebsd:freebsd:9.3:p19:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P20
cpe:2.3:o:freebsd:freebsd:9.3:p20:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P5
cpe:2.3:o:freebsd:freebsd:9.3:p5:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1
cpe:2.3:o:freebsd:freebsd:10.1:-:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P10
cpe:2.3:o:freebsd:freebsd:10.1:p10:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P5
cpe:2.3:o:freebsd:freebsd:10.1:p5:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P7
cpe:2.3:o:freebsd:freebsd:10.1:p7:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P21
cpe:2.3:o:freebsd:freebsd:9.3:p21:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P22
cpe:2.3:o:freebsd:freebsd:9.3:p22:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P23
cpe:2.3:o:freebsd:freebsd:9.3:p23:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P24
cpe:2.3:o:freebsd:freebsd:9.3:p24:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P25
cpe:2.3:o:freebsd:freebsd:9.3:p25:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P17
cpe:2.3:o:freebsd:freebsd:10.1:p17:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P18
cpe:2.3:o:freebsd:freebsd:10.1:p18:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P19
cpe:2.3:o:freebsd:freebsd:10.1:p19:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P22
cpe:2.3:o:freebsd:freebsd:10.1:p22:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P24
cpe:2.3:o:freebsd:freebsd:10.1:p24:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P25
cpe:2.3:o:freebsd:freebsd:10.1:p25:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P26
cpe:2.3:o:freebsd:freebsd:10.1:p26:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P27
cpe:2.3:o:freebsd:freebsd:10.1:p27:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P1
cpe:2.3:o:freebsd:freebsd:10.2:p1:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P10
cpe:2.3:o:freebsd:freebsd:10.2:p10:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P2
cpe:2.3:o:freebsd:freebsd:10.2:p2:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P5
cpe:2.3:o:freebsd:freebsd:10.2:p5:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P7
cpe:2.3:o:freebsd:freebsd:10.2:p7:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P8
cpe:2.3:o:freebsd:freebsd:10.2:p8:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P9
cpe:2.3:o:freebsd:freebsd:10.2:p9:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P28
cpe:2.3:o:freebsd:freebsd:9.3:p28:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P30
cpe:2.3:o:freebsd:freebsd:9.3:p30:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P31
cpe:2.3:o:freebsd:freebsd:9.3:p31:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P32
cpe:2.3:o:freebsd:freebsd:9.3:p32:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P33
cpe:2.3:o:freebsd:freebsd:9.3:p33:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P34
cpe:2.3:o:freebsd:freebsd:9.3:p34:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Oracle » Linux » Version: 6
cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
Matching versions
Siemens » Tim 4r-ie Firmware
cpe:2.3:o:siemens:tim_4r-ie_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Tim 4r-ie
Siemens » Tim 4r-ie Dnp3 Firmware » Version: N/A
cpe:2.3:o:siemens:tim_4r-ie_dnp3_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Tim 4r-ie Dnp3 » Version: N/A
NTP » NTP
Versions from including (>=) 4.3.0 and before (<) 4.3.90
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
Matching versions
NTP » NTP
Versions up to, including, (<=) 4.2.8
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta1
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta2
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta3
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta4
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta5
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc3
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc3
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P4
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P5
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 12.04
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 14.04 ESM Edition
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 16.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 22
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 23
cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
Matching versions
Netapp » Oncommand Balance » Version: N/A
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: N/A
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2015-7977

EPSS FAQ

6.56%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-7977

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.9	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2015-7977

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-7977

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html

[SECURITY] Fedora 22 Update: ntp-4.2.6p5-36.fc22
Third Party Advisory

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html

[SECURITY] Fedora 23 Update: ntp-4.2.6p5-36.fc23
Third Party Advisory

CVEs referencing this url
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf

Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2016-2583.html

RHSA-2016:2583 - Security Advisory - Red Hat Customer Portal
Broken Link

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html

[security-announce] SUSE-SU-2016:1175-1: important: Security update for
Broken Link

CVEs referencing this url
http://support.ntp.org/bin/view/Main/NtpBug2939

NtpBug2939 < Main < NTP
Vendor Advisory
http://www.securitytracker.com/id/1034782

ntp Multiple Flaws Let Remote Users Spoof Messages, Obtain Potentially Sensitive Information, and Deny Service - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
https://bto.bluecoat.com/security-advisory/sa113

SA113 : January 2016 NTP Security Vulnerabilities
Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/201607-15

NTP: Multiple vulnerabilities (GLSA 201607-15) — Gentoo security
Third Party Advisory

CVEs referencing this url
http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security

SecurityNotice < Main < NTP
Vendor Advisory

CVEs referencing this url
https://security.netapp.com/advisory/ntap-20171031-0001/

January 2016 Network Time Protocol Daemon (ntpd) Vulnerabilities in NetApp Products | NetApp Product Security
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html

[security-announce] SUSE-SU-2016:1177-1: important: Security update for
Broken Link

CVEs referencing this url
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc

Third Party Advisory

CVEs referencing this url
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11

Siemens TIM 4R-IE Devices | CISA
Third Party Advisory;US Government Resource

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Oracle Linux Bulletin - April 2016
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html

[security-announce] openSUSE-SU-2016:1292-1: important: Security update
Broken Link

CVEs referencing this url
http://www.securityfocus.com/bid/81815

NTP CVE-2015-7977 NULL Pointer Dereference Denial of Service Vulnerability
Third Party Advisory;VDB Entry
http://rhn.redhat.com/errata/RHSA-2016-0780.html

RHSA-2016:0780 - Security Advisory - Red Hat Customer Portal
Broken Link

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html

[security-announce] SUSE-SU-2016:1311-1: important: Security update for
Broken Link

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html

[security-announce] SUSE-SU-2016:1912-1: important: Security update for
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html

[security-announce] SUSE-SU-2016:2094-1: important: Security update for
Broken Link

CVEs referencing this url
https://www.kb.cert.org/vuls/id/718152

VU#718152 - NTP.org ntpd contains multiple vulnerabilities
Third Party Advisory;US Government Resource

CVEs referencing this url
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd

Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: January 2016
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-3096-1

USN-3096-1: NTP vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html

openSUSE-SU-2016:1423-1: moderate: Security update for ntp
Broken Link

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html

[security-announce] SUSE-SU-2016:1247-1: important: Security update for
Broken Link

CVEs referencing this url
http://www.debian.org/security/2016/dsa-3629

Debian -- Security Information -- DSA-3629-1 ntp
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2015-7977

Products affected by CVE-2015-7977

Exploit prediction scoring system (EPSS) score for CVE-2015-7977

CVSS scores for CVE-2015-7977

CWE ids for CVE-2015-7977

References for CVE-2015-7977