PT-2015-7688 · Ntf+5 · Ntp+6

Jonathan Gardner · Published 2015-12-31 · Updated 2024-06-15 · CVE-2015-7976

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions NTP versions 4.1.2, 4.2.x through 4.2.8p5, 4.3, 4.3.25, 4.3.70, 4.3.77

Description The issue concerns the ntpq saveconfig command, which does not properly filter special characters. This allows attackers to cause unspecified impact via a crafted filename.

Recommendations For NTP version 4.1.2, update to a version later than 4.1.2 to resolve the issue. For NTP versions 4.2.x through 4.2.8p5, update to version 4.2.8p6 or later. For NTP versions 4.3, 4.3.25, 4.3.70, 4.3.77, consider disabling the ntpq saveconfig command until a patch is available.

Exploit

Fix

DoS

Weakness Enumeration

CWE-254

Related Identifiers

ALT-PU-2017-2335

CVE-2015-7976

OPENSUSE-SU-2016_1292-1

OPENSUSE-SU-2024:10181-1

SUSE-SU-2016:1175-1

SUSE-SU-2016:1177-1

SUSE-SU-2016:1247-1

SUSE-SU-2016:1311-1

USN-3096-1

Affected Products

Alt Linux

Cisco Ios Xr

Cisco Nexus

Freebsd

Ntp

Suse

Ubuntu

References · 241

• 🔥 https://github.com/opsxcq/exploit-CVE-2016-7434 · Exploit
• https://bdu.fstec.ru/vul/2017-02017 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2516 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9310 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:1311-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2517 · Security Note
• https://ubuntu.com/security/CVE-2015-7974 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4954 · Security Note
• https://ubuntu.com/security/CVE-2015-7976 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4953 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1548 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7703 · Security Note
• https://ubuntu.com/security/CVE-2016-1548 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7702 · Security Note