CVE-2015-7853 PUBLISHED

The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.

EPSS 34.95% · 97.0th percentile

Risk Scores

EPSS Score
34.95%
97.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSntp0, 1:4.2.6.p5+dfsg-3ubuntu2, 1:4.2.6.p5+dfsg-3ubuntu2.14.04.1

Timeline

References

Open in Interactive Console →