Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-7975
HistoryDec 31, 2015 - 12:00 a.m.

CVE-2015-7975

2015-12-3100:00:00
ubuntu.com
ubuntu.com
7

0.002 Low

EPSS

Percentile

64.3%

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not
properly validate the length of its input, which allows an attacker to
cause a denial of service (application crash).

Bugs

Notes

Author Note
mdeslaur introduced in 4.2.8 by https://github.com/ntp-project/ntp/commit/be565bf3c6a5badd4a6ce2f336476d1e1dd98915
OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchntp< 1:4.2.8p4+dfsg-3ubuntu5.3UNKNOWN