Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-7976
4
MEDIUMCVSS v2
Published
January 30, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.
ntp-project/ntp
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.= 4.1.2, <= 4.2.8, = 4.3.80, = 4.3.51, = 4.3.17, = 4.3.30, = 4.3.74, = 4.3.67, = 4.3.14, = 4.3.27, = 4.3.13, = 4.3.1, = 4.3.16, = 4.3.61, = 4.3.77, = 4.3.78, = 4.3.46, = 4.3.53, = 4.3.6, = 4.3.68, = 4.3.10, = 4.3.40, = 4.3.42, = 4.3.64, = 4.3.79, = 4.3.2, = 4.3.20, = 4.3.35, = 4.3.36, = 4.3.0, = 4.3.24, = 4.3.25, = 4.3.31, = 4.3.39, = 4.3.4, = 4.3.48, = 4.3.54, = 4.3.70, = 4.3.84, = 4.3.85, = 4.3.86, = 4.3.15, = 4.3.22, = 4.3.3, = 4.3.45, = 4.3.60, = 4.3.69, = 4.3.83, = 4.3.11, = 4.3.34, = 4.3.49, = 4.3.56, = 4.3.57, = 4.3.65, = 4.3.71, = 4.3.88, = 4.3.12, = 4.3.21, = 4.3.43, = 4.3.50, = 4.3.58, = 4.3.59, = 4.3.66, = 4.3.81, = 4.3.9, = 4.3.32, = 4.3.47, = 4.3.55, = 4.3.62, = 4.3.63, = 4.3.7, = 4.3.23, = 4.3.37, = 4.3.38, = 4.3.52, = 4.3.75, = 4.3.76, = 4.3.82, = 4.3.18, = 4.3.19, = 4.3.26, = 4.3.33, = 4.3.41, = 4.3.5, = 4.3.72, = 4.3.8, = 4.3.87, = 4.3.28, = 4.3.29, = 4.3.44, = 4.3.73, = 4.3.89NVD