← Back

CVE-2015-7848

nvd nist
Published: Jan 6, 2017Modified: May 23, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.

Affected (24)

Netapp
5 products
Clustered Data Ontap
Data Ontap Operating In 7 Mode
Oncommand Balance
Oncommand Performance Manager
Oncommand Unified Manager
Ntp
1 product
Ntp
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Clustered Data Ontap
All versions
Data Ontap Operating In 7 Mode
All versions
Oncommand Balance
All versions
Oncommand Performance Manager
All versions
Oncommand Unified Manager
All versions
Configuration B
19 vulnerable
Vulnerable SoftwareAffected Versions
Ntp
Ntp
From 4.0 to 4.2.8
Ntp
From 4.3.0 to 4.3.77
Ntp
Version 4.2.8
Ntp
Version 4.2.8 p1-beta1
Ntp
Version 4.2.8 p1-beta2
Ntp
Version 4.2.8 p1-beta3
Ntp
Version 4.2.8 p1-beta4
Ntp
Version 4.2.8 p1-beta5
Ntp
Version 4.2.8 p1-rc1
Ntp
Version 4.2.8 p1-rc2
Ntp
Version 4.2.8 p1
Ntp
Version 4.2.8 p2-rc1
Ntp
Version 4.2.8 p2-rc2
Ntp
Version 4.2.8 p2-rc3
Ntp
Version 4.2.8 p2
Ntp
Version 4.2.8 p3-rc1
Ntp
Version 4.2.8 p3-rc2
Ntp
Version 4.2.8 p3-rc3
Ntp
Version 4.2.8 p3

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (10)

Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
ExploitTechnical DescriptionThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitTechnical DescriptionThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.