Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-7854
8.8
HIGHCVSS v3
Published
August 7, 2017
CVSS v2
6.5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.
ntp-project/ntp
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.= 4.2.8, >= 4.2.0, < 4.2.8, >= 4.3.0, < 4.3.77NVD