CVE-2015-7853

Published: Aug 7, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.

Affected (24)

Products: Ntp: Ntp · Netapp: Clustered Data Ontap, Data Ontap, Oncommand Balance, Oncommand Performance Manager, Oncommand Unified Manager

1 product

5 products

Oncommand Performance Manager

Oncommand Unified Manager

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Ntp Ntp	From 4.2.0 to 4.2.8
Ntp Ntp	From 4.3.0 to 4.3.77
Ntp Ntp	Version 4.2.8
Ntp Ntp	Version 4.2.8 p1-beta1
Ntp Ntp	Version 4.2.8 p1-beta2
Ntp Ntp	Version 4.2.8 p1-beta3
Ntp Ntp	Version 4.2.8 p1-beta4
Ntp Ntp	Version 4.2.8 p1-beta5
Ntp Ntp	Version 4.2.8 p1-rc1
Ntp Ntp	Version 4.2.8 p1-rc2
Ntp Ntp	Version 4.2.8 p1
Ntp Ntp	Version 4.2.8 p2-rc1
Ntp Ntp	Version 4.2.8 p2-rc2
Ntp Ntp	Version 4.2.8 p2-rc3
Ntp Ntp	Version 4.2.8 p2
Ntp Ntp	Version 4.2.8 p3-rc1
Ntp Ntp	Version 4.2.8 p3-rc2
Ntp Ntp	Version 4.2.8 p3-rc3
Ntp Ntp	Version 4.2.8 p3

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Clustered Data Ontap	All versions
Netapp Data Ontap	All versions
Netapp Oncommand Balance	All versions
Netapp Oncommand Performance Manager	All versions
Netapp Oncommand Unified Manager	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (56)

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html

Source: cve@mitre.org

http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html

Source: cve@mitre.org

http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html

Source: cve@mitre.org

http://support.ntp.org/bin/view/Main/NtpBug2920

Source: cve@mitre.org

PatchVendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/536737/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/536760/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/536796/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/536833/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/77273

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033951

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.talosintel.com/vulnerability-reports/

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2783-1

Source: cve@mitre.org

https://bto.bluecoat.com/security-advisory/sa103

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1274262

Source: cve@mitre.org

Issue TrackingThird Party AdvisoryVDB Entry

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

Source: cve@mitre.org

https://security.gentoo.org/glsa/201607-15

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://security.netapp.com/advisory/ntap-20171004-0001/

Source: cve@mitre.org

Third Party Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html