← Back

CVE-2015-7976

nvd nist
Published: Jan 30, 2017Modified: May 13, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

Affected (108)

Products: Ntp: Ntp · Novell: Suse Openstack Cloud · Opensuse: Leap, Opensuse · +1 more
Show all products
Ntp: Ntp · Novell: Suse Openstack Cloud · Opensuse: Leap, Opensuse · Suse: Linux Enterprise Debuginfo, Linux Enterprise Desktop, Linux Enterprise Server, Manager, Manager Proxy, Suse Linux Enterprise Server
Ntp
1 product
Ntp
Novell
1 product
Suse Openstack Cloud
Opensuse
2 products
Leap
Opensuse
Suse
6 products
Linux Enterprise Debuginfo
Linux Enterprise Desktop
Linux Enterprise Server
Manager
Manager Proxy
Suse Linux Enterprise Server
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ntp
Version 4.1.2
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Ntp
Up to 4.2.8
Configuration C
90 vulnerable
Vulnerable SoftwareAffected Versions
Ntp
Ntp
Version 4.3.0
Ntp
Version 4.3.10
Ntp
Version 4.3.11
Ntp
Version 4.3.12
Ntp
Version 4.3.13
Ntp
Version 4.3.14
Ntp
Version 4.3.15
Ntp
Version 4.3.16
Ntp
Version 4.3.17
Ntp
Version 4.3.18
Ntp
Version 4.3.19
Ntp
Version 4.3.1
Ntp
Version 4.3.20
Ntp
Version 4.3.21
Ntp
Version 4.3.22
Ntp
Version 4.3.23
Ntp
Version 4.3.24
Ntp
Version 4.3.25
Ntp
Version 4.3.26
Ntp
Version 4.3.27
Ntp
Version 4.3.28
Ntp
Version 4.3.29
Ntp
Version 4.3.2
Ntp
Version 4.3.30
Ntp
Version 4.3.31
Ntp
Version 4.3.32
Ntp
Version 4.3.33
Ntp
Version 4.3.34
Ntp
Version 4.3.35
Ntp
Version 4.3.36
Ntp
Version 4.3.37
Ntp
Version 4.3.38
Ntp
Version 4.3.39
Ntp
Version 4.3.3
Ntp
Version 4.3.40
Ntp
Version 4.3.41
Ntp
Version 4.3.42
Ntp
Version 4.3.43
Ntp
Version 4.3.44
Ntp
Version 4.3.45
Ntp
Version 4.3.46
Ntp
Version 4.3.47
Ntp
Version 4.3.48
Ntp
Version 4.3.49
Ntp
Version 4.3.4
Ntp
Version 4.3.50
Ntp
Version 4.3.51
Ntp
Version 4.3.52
Ntp
Version 4.3.53
Ntp
Version 4.3.54
Ntp
Version 4.3.55
Ntp
Version 4.3.56
Ntp
Version 4.3.57
Ntp
Version 4.3.58
Ntp
Version 4.3.59
Ntp
Version 4.3.5
Ntp
Version 4.3.60
Ntp
Version 4.3.61
Ntp
Version 4.3.62
Ntp
Version 4.3.63
Ntp
Version 4.3.64
Ntp
Version 4.3.65
Ntp
Version 4.3.66
Ntp
Version 4.3.67
Ntp
Version 4.3.68
Ntp
Version 4.3.69
Ntp
Version 4.3.6
Ntp
Version 4.3.70
Ntp
Version 4.3.71
Ntp
Version 4.3.72
Ntp
Version 4.3.73
Ntp
Version 4.3.74
Ntp
Version 4.3.75
Ntp
Version 4.3.76
Ntp
Version 4.3.77
Ntp
Version 4.3.78
Ntp
Version 4.3.79
Ntp
Version 4.3.7
Ntp
Version 4.3.80
Ntp
Version 4.3.81
Ntp
Version 4.3.82
Ntp
Version 4.3.83
Ntp
Version 4.3.84
Ntp
Version 4.3.85
Ntp
Version 4.3.86
Ntp
Version 4.3.87
Ntp
Version 4.3.88
Ntp
Version 4.3.89
Ntp
Version 4.3.8
Ntp
Version 4.3.9
Configuration D
16 vulnerable
Vulnerable SoftwareAffected Versions
Suse Openstack Cloud
Version 5
Leap
Version 42.1
Opensuse
Version 13.2
Suse
Linux Enterprise Debuginfo
Version 11 sp2
Linux Enterprise Debuginfo
Version 11 sp3
Linux Enterprise Debuginfo
Version 11 sp4
Suse
Linux Enterprise Desktop
Version 12
Linux Enterprise Desktop
Version 12 sp1
Suse
Linux Enterprise Server
Version 10 sp4
Linux Enterprise Server
Version 11 sp2
Linux Enterprise Server
Version 11 sp3
Linux Enterprise Server
Version 11 sp4
Linux Enterprise Server
Version 12 sp1
Manager
Version 2.1
Manager Proxy
Version 2.1
Suse Linux Enterprise Server
Version 12

Related CWEs

CWE-254
CWE-254

References (34)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.