CVE-2015-7977

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
References
Link Resource
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html Broken Link
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html Broken Link
http://rhn.redhat.com/errata/RHSA-2016-0780.html Broken Link
http://rhn.redhat.com/errata/RHSA-2016-2583.html Broken Link
http://support.ntp.org/bin/view/Main/NtpBug2939 Vendor Advisory
http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd Third Party Advisory
http://www.debian.org/security/2016/dsa-3629 Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html Third Party Advisory
http://www.securityfocus.com/bid/81815 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1034782 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-3096-1 Third Party Advisory
https://bto.bluecoat.com/security-advisory/sa113 Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc Third Party Advisory
https://security.gentoo.org/glsa/201607-15 Third Party Advisory
https://security.netapp.com/advisory/ntap-20171031-0001/ Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/718152 Third Party Advisory US Government Resource
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html Broken Link
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html Broken Link
http://rhn.redhat.com/errata/RHSA-2016-0780.html Broken Link
http://rhn.redhat.com/errata/RHSA-2016-2583.html Broken Link
http://support.ntp.org/bin/view/Main/NtpBug2939 Vendor Advisory
http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd Third Party Advisory
http://www.debian.org/security/2016/dsa-3629 Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html Third Party Advisory
http://www.securityfocus.com/bid/81815 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1034782 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-3096-1 Third Party Advisory
https://bto.bluecoat.com/security-advisory/sa113 Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc Third Party Advisory
https://security.gentoo.org/glsa/201607-15 Third Party Advisory
https://security.netapp.com/advisory/ntap-20171031-0001/ Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/718152 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:tim_4r-ie_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:tim_4r-ie:*:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:tim_4r-ie_dnp3_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:tim_4r-ie_dnp3:-:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:o:freebsd:freebsd:9.3:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p10:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p12:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p13:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p16:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p19:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p20:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p21:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p22:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p23:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p24:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p25:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p28:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p30:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p31:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p32:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p33:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p34:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p7:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p8:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:9.3:p9:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p10:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p12:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p15:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p16:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p17:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p18:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p19:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p22:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p24:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p25:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p26:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p27:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p7:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p8:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.1:p9:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p10:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p7:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p8:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:10.2:p9:*:*:*:*:*:*

Configuration 7 (hide)

OR cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*

Configuration 8 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration 9 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

History

21 Nov 2024, 02:37

Type Values Removed Values Added
References () http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html - Third Party Advisory () http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html - Third Party Advisory
References () http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html - Third Party Advisory () http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - Broken Link
References () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - Third Party Advisory () http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - Broken Link () http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - Broken Link
References () http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - Broken Link () http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - Broken Link
References () http://rhn.redhat.com/errata/RHSA-2016-0780.html - Broken Link () http://rhn.redhat.com/errata/RHSA-2016-0780.html - Broken Link
References () http://rhn.redhat.com/errata/RHSA-2016-2583.html - Broken Link () http://rhn.redhat.com/errata/RHSA-2016-2583.html - Broken Link
References () http://support.ntp.org/bin/view/Main/NtpBug2939 - Vendor Advisory () http://support.ntp.org/bin/view/Main/NtpBug2939 - Vendor Advisory
References () http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security - Vendor Advisory () http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security - Vendor Advisory
References () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd - Third Party Advisory () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd - Third Party Advisory
References () http://www.debian.org/security/2016/dsa-3629 - Third Party Advisory () http://www.debian.org/security/2016/dsa-3629 - Third Party Advisory
References () http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - Third Party Advisory () http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - Third Party Advisory
References () http://www.securityfocus.com/bid/81815 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/81815 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1034782 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1034782 - Third Party Advisory, VDB Entry
References () http://www.ubuntu.com/usn/USN-3096-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-3096-1 - Third Party Advisory
References () https://bto.bluecoat.com/security-advisory/sa113 - Third Party Advisory () https://bto.bluecoat.com/security-advisory/sa113 - Third Party Advisory
References () https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - Third Party Advisory () https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - Third Party Advisory
References () https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - Third Party Advisory () https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc - Third Party Advisory
References () https://security.gentoo.org/glsa/201607-15 - Third Party Advisory () https://security.gentoo.org/glsa/201607-15 - Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20171031-0001/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20171031-0001/ - Third Party Advisory
References () https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 - Third Party Advisory, US Government Resource () https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 - Third Party Advisory, US Government Resource
References () https://www.kb.cert.org/vuls/id/718152 - Third Party Advisory, US Government Resource () https://www.kb.cert.org/vuls/id/718152 - Third Party Advisory, US Government Resource

Information

Published : 2017-01-30 21:59

Updated : 2024-11-21 02:37


NVD link : CVE-2015-7977

Mitre link : CVE-2015-7977

CVE.ORG link : CVE-2015-7977


JSON object : View

Products Affected

oracle

  • linux

siemens

  • tim_4r-ie_dnp3
  • tim_4r-ie_dnp3_firmware
  • tim_4r-ie_firmware
  • tim_4r-ie

canonical

  • ubuntu_linux

netapp

  • oncommand_balance
  • clustered_data_ontap

ntp

  • ntp

freebsd

  • freebsd

debian

  • debian_linux

fedoraproject

  • fedora
CWE
CWE-476

NULL Pointer Dereference