CVE-2015-7848 - CVE House
Back to Database
Status published High CVE-2015-7848

An integer overflow can occur in NTP-dev.4.3.70 leading to an...

Vulnerability Description

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-7848

Credits & Attribution

No credits recorded in the NVD database.

References

More from netapp

View All →
CVE-2021-32292
An issue was discovered in json-c from 20200420 (post 0.14...
Critical 9.8
CVE-2020-36184
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization...
Unknown 0
CVE-2020-36181
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization...
Unknown 0
CVE-2020-36180
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization...
Unknown 0
CVE-2020-36179
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization...
Unknown 0

Affected Vendor

Affected Software

clustered data ontap, data ontap operating in 7-mode, oncommand balance, oncommand performance manager, oncommand unified manager, ntp
Vulnerable Versions:
4.0, 4.3.0, 4.2.8

Timeline

Official Publish: January 6th, 2017
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.