Lucene search

K
f5F5F5:K17528
HistoryNov 10, 2015 - 12:00 a.m.

K17528 : NTP vulnerability CVE-2015-7850

2015-11-1000:00:00
my.f5.com
16

7.3 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.4%

Security Advisory Description

ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file. (CVE-2015-7850)

Impact

Under certain specific conditions, an attacker can send a set of packets to ntpd that will cause it to stop responding and/or create a potentially large log file.