VYPR
Medium severity5.9NVD Advisory· Published Aug 7, 2017· Updated May 13, 2026

CVE-2015-7852

CVE-2015-7852

Description

ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.

Affected products

45
  • cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
  • cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*
  • cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:clustered_data_ontap:*:*
  • Ntp/Ntp18 versions
    cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*range: >=4.2.0,<4.2.8
    • cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
    • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
  • cpe:2.3:o:netapp:data_ontap:-:*:*:*:*:7-mode:*:*
  • cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

9

News mentions

0

No linked articles in our index yet.