Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-7848
7.5
HIGHCVSS v3
Published
January 6, 2017
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.
ntp-project/ntp
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.= 4.2.8, >= 4.3.0, < 4.3.77, >= 4.0, < 4.2.8NVD