Lucene search

K
f5F5F5:K17516
HistoryNov 06, 2015 - 12:00 a.m.

K17516 : NTP vulnerability CVE-2015-7852

2015-11-0600:00:00
my.f5.com
18

AI Score

7.2

Confidence

High

EPSS

0.044

Percentile

92.5%

Security Advisory Description

ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets. (CVE-2015-7852)

Impact

While the scope of the impact is limited, an attacker may be able to craft response packets that cause ntpqto exit. There is no data plane exposure for the BIG-IP system, and this issue can only be exposed when an instance of ntpq is running in interactive mode.