CVE-2015-7704

HIGH

NTP 4.x < 4.2.8p4 and 4.3.x < 4.3.77 - Denial of Service via Crafted KOD Messages

Title source: llm

Description

The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.

References (20)

Core 20

Core References

Issue Tracking, Third Party Advisory, VDB Entry x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1271070

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2015-1930.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/77280

Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

https://www.kb.cert.org/vuls/id/718152

Issue Tracking, Vendor Advisory x_refsource_confirm

http://bugs.ntp.org/show_bug.cgi?id=2901

Third Party Advisory x_refsource_confirm

https://support.citrix.com/article/CTX220112

Third Party Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20171004-0002/

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1033951

Release Notes, Vendor Advisory x_refsource_confirm

http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_4_2_8p4_Securit

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2015/dsa-3388

Third Party Advisory x_refsource_misc

https://www.cs.bu.edu/~goldbe/NTPattack.html

Technical Description, Third Party Advisory x_refsource_misc

https://eprint.iacr.org/2015/1020.pdf

Third Party Advisory, VDB Entry x_refsource_confirm

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2015-2520.html

Vendor Advisory x_refsource_confirm

http://support.ntp.org/bin/view/Main/NtpBug2901

Third Party Advisory, VDB Entry vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201607-15

Third Party Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20171004-0001/

Third Party Advisory x_refsource_confirm

https://kc.mcafee.com/corporate/index?page=content&id=SB10284

Various Sources x_refsource_misc

https://www.arista.com/en/support/advisories-notices/security-advisories/1212-security-advisory-0016

Scores

CVSS v3 7.5

EPSS 0.2146

EPSS Percentile 95.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-20

Status published

Products (34)

citrix/xenserver 6.0.2

citrix/xenserver 6.2.0

citrix/xenserver 6.5

citrix/xenserver 7.0

debian/debian_linux 7.0

debian/debian_linux 8.0

debian/debian_linux 9.0

mcafee/enterprise_security_manager < 10.4.0

netapp/clustered_data_ontap

netapp/data_ontap

... and 24 more

Published Aug 07, 2017

Tracked Since Feb 18, 2026