Medium severity5.9NVD Advisory· Published Jan 30, 2017· Updated Jun 17, 2026

CVE-2015-7977

Description

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

113

NetApp/Clustered Data Ontap
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
NetApp/Oncommand Balance
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
NTP/NTP20 versions
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*range: <=4.2.8
- cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*
Canonical/Ubuntu Linux3 versions
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
FreeBSD/FreeBSD56 versions
cpe:2.3:o:freebsd:freebsd:10.1:-:*:*:*:*:*:*+ 55 more
- cpe:2.3:o:freebsd:freebsd:10.1:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p10:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p12:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p15:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p16:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p17:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p18:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p19:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p22:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p24:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p25:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p26:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p27:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.1:p9:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.2:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.2:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.2:p10:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.2:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.2:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.2:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.2:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:10.2:p9:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p10:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p12:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p13:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p16:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p19:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p20:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p21:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p22:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p23:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p24:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p25:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p28:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p30:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p31:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p32:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p33:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p34:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:9.3:p9:*:*:*:*:*:*
Oracle Corporation/Linux
cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
Siemens Foundation/Tim 4r Ie Dnp3 Firmware
cpe:2.3:o:siemens:tim_4r-ie_dnp3_firmware:-:*:*:*:*:*:*:*
Siemens Foundation/Tim 4r Ie Firmware
cpe:2.3:o:siemens:tim_4r-ie_firmware:*:*:*:*:*:*:*:*
NTP/ntpdllm-fuzzy
Range: <4.2.8p6, <4.3.90
osv-coords24 versions
pkg:rpm/opensuse/ntp&distro=openSUSE%20Tumbleweed pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/ntp&distro=SUSE%20Manager%202.1 pkg:rpm/suse/ntp&distro=SUSE%20Manager%20Proxy%202.1 pkg:rpm/suse/ntp&distro=SUSE%20OpenStack%20Cloud%205 pkg:rpm/suse/yast2-ntp-client&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/yast2-ntp-client&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/yast2-ntp-client&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/yast2-ntp-client&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/yast2-ntp-client&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/yast2-ntp-client&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/yast2-ntp-client&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/yast2-ntp-client&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/yast2-ntp-client&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1
< 4.2.8p9-1.1+ 23 more
- (no CPE)range: < 4.2.8p9-1.1
- (no CPE)range: < 4.2.8p6-46.5.2
- (no CPE)range: < 4.2.8p6-8.2
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 4.2.8p6-8.2
- (no CPE)range: < 4.2.8p6-46.5.2
- (no CPE)range: < 4.2.8p6-8.2
- (no CPE)range: < 4.2.8p6-8.2
- (no CPE)range: < 4.2.8p6-46.5.2
- (no CPE)range: < 4.2.8p6-8.2
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 3.1.12.4-8.2
- (no CPE)range: < 3.1.22-6.2
- (no CPE)range: < 2.17.14.1-1.12.1
- (no CPE)range: < 3.1.12.4-8.2
- (no CPE)range: < 3.1.22-6.2
- (no CPE)range: < 3.1.12.4-8.2
- (no CPE)range: < 3.1.22-6.2
- (no CPE)range: < 3.1.12.4-8.2
- (no CPE)range: < 3.1.22-6.2

Patches

Vulnerability mechanics

References

lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.htmlnvdThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.htmlnvdThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.htmlnvdThird Party Advisory
support.ntp.org/bin/view/Main/NtpBug2939nvdVendor Advisory
support.ntp.org/bin/view/Main/SecurityNoticenvdVendor Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpdnvdThird Party Advisory
www.debian.org/security/2016/dsa-3629nvdThird Party Advisory
www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlnvdThird Party Advisory
www.securityfocus.com/bid/81815nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1034782nvdThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-3096-1nvdThird Party Advisory
bto.bluecoat.com/security-advisory/sa113nvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-497656.pdfnvdThird Party Advisory
security.freebsd.org/advisories/FreeBSD-SA-16:09.ntp.ascnvdThird Party Advisory
security.gentoo.org/glsa/201607-15nvdThird Party Advisory
security.netapp.com/advisory/ntap-20171031-0001/nvdThird Party Advisory
us-cert.cisa.gov/ics/advisories/icsa-21-103-11nvdThird Party AdvisoryUS Government Resource
www.kb.cert.org/vuls/id/718152nvdThird Party AdvisoryUS Government Resource
lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.htmlnvdBroken Link
lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.htmlnvdBroken Link
lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.htmlnvdBroken Link
lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.htmlnvdBroken Link
lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.htmlnvdBroken Link
lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.htmlnvdBroken Link
lists.opensuse.org/opensuse-updates/2016-05/msg00114.htmlnvdBroken Link
rhn.redhat.com/errata/RHSA-2016-0780.htmlnvdBroken Link
rhn.redhat.com/errata/RHSA-2016-2583.htmlnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000