ByteOS Network

Vulnerability Details :

CVE-2015-7850

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-07 Aug, 2017 | 20:00

Updated At-06 Aug, 2024 | 07:59

ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:07 Aug, 2017 | 20:00

Updated At:06 Aug, 2024 | 07:59

▼CVE Numbering Authority (CNA)

ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securitytracker.com/id/1033951	vdb-entry x_refsource_SECTRACK
http://www.debian.org/security/2015/dsa-3388	vendor-advisory x_refsource_DEBIAN
http://support.ntp.org/bin/view/Main/NtpBug2917	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1274258	x_refsource_CONFIRM
http://www.securityfocus.com/bid/77279	vdb-entry x_refsource_BID
https://security.gentoo.org/glsa/201607-15	vendor-advisory x_refsource_GENTOO
https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1033951

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.debian.org/security/2015/dsa-3388

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://support.ntp.org/bin/view/Main/NtpBug2917

Resource:

x_refsource_CONFIRM

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1274258

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/77279

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://security.gentoo.org/glsa/201607-15

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: https://security.netapp.com/advisory/ntap-20171004-0001/

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id/1033951	vdb-entry x_refsource_SECTRACK x_transferred
http://www.debian.org/security/2015/dsa-3388	vendor-advisory x_refsource_DEBIAN x_transferred
http://support.ntp.org/bin/view/Main/NtpBug2917	x_refsource_CONFIRM x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1274258	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/77279	vdb-entry x_refsource_BID x_transferred
https://security.gentoo.org/glsa/201607-15	vendor-advisory x_refsource_GENTOO x_transferred
https://security.netapp.com/advisory/ntap-20171004-0001/	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.securitytracker.com/id/1033951

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.debian.org/security/2015/dsa-3388

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://support.ntp.org/bin/view/Main/NtpBug2917

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1274258

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/77279

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://security.gentoo.org/glsa/201607-15

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: https://security.netapp.com/advisory/ntap-20171004-0001/

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:07 Aug, 2017 | 20:29

Updated At:20 Apr, 2025 | 01:37

ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P

Type: Primary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 4.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:N/I:N/A:P

CPE Matches

ntp>>ntp>>Versions from 4.2.0(inclusive) to 4.2.8(exclusive)

cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*

ntp>>ntp>>Versions from 4.3.0(inclusive) to 4.3.77(exclusive)

cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*

ntp>>ntp>>4.2.8

cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>7.0

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>9.0

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

NetApp, Inc.

>>oncommand_balance>>-

cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*

NetApp, Inc.

>>oncommand_performance_manager>>-

cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*

NetApp, Inc.

>>oncommand_unified_manager>>-

cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:clustered_data_ontap:*:*

NetApp, Inc.

>>clustered_data_ontap>>-

cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*

NetApp, Inc.

>>data_ontap>>-

cpe:2.3:o:netapp:data_ontap:-:*:*:*:*:7-mode:*:*

Weaknesses

CWE ID	Type	Source
CWE-835	Primary	nvd@nist.gov

CWE ID: CWE-835

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://support.ntp.org/bin/view/Main/NtpBug2917	cve@mitre.org	Patch Vendor Advisory
http://www.debian.org/security/2015/dsa-3388	cve@mitre.org	Third Party Advisory
http://www.securityfocus.com/bid/77279	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1033951	cve@mitre.org	Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1274258	cve@mitre.org	Issue Tracking Third Party Advisory VDB Entry
https://security.gentoo.org/glsa/201607-15	cve@mitre.org	Third Party Advisory VDB Entry
https://security.netapp.com/advisory/ntap-20171004-0001/	cve@mitre.org	Third Party Advisory
http://support.ntp.org/bin/view/Main/NtpBug2917	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.debian.org/security/2015/dsa-3388	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.securityfocus.com/bid/77279	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1033951	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1274258	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory VDB Entry
https://security.gentoo.org/glsa/201607-15	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://security.netapp.com/advisory/ntap-20171004-0001/	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

Hyperlink: http://support.ntp.org/bin/view/Main/NtpBug2917

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.debian.org/security/2015/dsa-3388

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/77279

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1033951

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1274258

Source: cve@mitre.org

Resource:

Issue Tracking

Third Party Advisory

VDB Entry

Hyperlink: https://security.gentoo.org/glsa/201607-15

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://security.netapp.com/advisory/ntap-20171004-0001/

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://support.ntp.org/bin/view/Main/NtpBug2917