Read the docs
TI-2015-06541 Aliases CVE-2015-7871GHSA-mxc3-mjx4-gjc9

Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows…

Priority HIGH 83CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.

Why it matters now

EPSS 0.81762 99th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 90

CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*4.2.6 to before 4.2.8; 4.3.0 to before 4.3.77VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p186:*:*:*:*:*:*4.2.5 p186VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p187:*:*:*:*:*:*4.2.5 p187VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p188:*:*:*:*:*:*4.2.5 p188VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p189:*:*:*:*:*:*4.2.5 p189VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p190:*:*:*:*:*:*4.2.5 p190VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p191:*:*:*:*:*:*4.2.5 p191VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p192:*:*:*:*:*:*4.2.5 p192VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p193:*:*:*:*:*:*4.2.5 p193VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p194:*:*:*:*:*:*4.2.5 p194VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:* Versions 4.2.6 to before 4.2.8; 4.3.0 to before 4.3.77 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p186:*:*:*:*:*:* Versions 4.2.5 p186 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p187:*:*:*:*:*:* Versions 4.2.5 p187 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p188:*:*:*:*:*:* Versions 4.2.5 p188 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p189:*:*:*:*:*:* Versions 4.2.5 p189 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p190:*:*:*:*:*:* Versions 4.2.5 p190 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p191:*:*:*:*:*:* Versions 4.2.5 p191 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p192:*:*:*:*:*:* Versions 4.2.5 p192 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p193:*:*:*:*:*:* Versions 4.2.5 p193 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p194:*:*:*:*:*:* Versions 4.2.5 p194 Vulnerable ·NTP Project
Show 80 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.2.5:p195:*:*:*:*:*:*4.2.5 p195VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p196:*:*:*:*:*:*4.2.5 p196VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p197:*:*:*:*:*:*4.2.5 p197VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p198:*:*:*:*:*:*4.2.5 p198VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p199:*:*:*:*:*:*4.2.5 p199VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p200:*:*:*:*:*:*4.2.5 p200VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p201:*:*:*:*:*:*4.2.5 p201VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p202:*:*:*:*:*:*4.2.5 p202VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p203:*:*:*:*:*:*4.2.5 p203VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p204:*:*:*:*:*:*4.2.5 p204VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p205:*:*:*:*:*:*4.2.5 p205VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p206:*:*:*:*:*:*4.2.5 p206VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p207:*:*:*:*:*:*4.2.5 p207VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p208:*:*:*:*:*:*4.2.5 p208VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p209:*:*:*:*:*:*4.2.5 p209VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p210:*:*:*:*:*:*4.2.5 p210VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p211:*:*:*:*:*:*4.2.5 p211VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p212:*:*:*:*:*:*4.2.5 p212VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p213:*:*:*:*:*:*4.2.5 p213VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p214:*:*:*:*:*:*4.2.5 p214VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p215:*:*:*:*:*:*4.2.5 p215VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p216:*:*:*:*:*:*4.2.5 p216VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p217:*:*:*:*:*:*4.2.5 p217VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p218:*:*:*:*:*:*4.2.5 p218VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p219:*:*:*:*:*:*4.2.5 p219VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p220:*:*:*:*:*:*4.2.5 p220VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p221:*:*:*:*:*:*4.2.5 p221VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p222:*:*:*:*:*:*4.2.5 p222VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p223:*:*:*:*:*:*4.2.5 p223VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p224:*:*:*:*:*:*4.2.5 p224VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p225:*:*:*:*:*:*4.2.5 p225VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p226:*:*:*:*:*:*4.2.5 p226VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p227:*:*:*:*:*:*4.2.5 p227VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p228:*:*:*:*:*:*4.2.5 p228VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p229:*:*:*:*:*:*4.2.5 p229VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p230:*:*:*:*:*:*4.2.5 p230VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p231_rc1:*:*:*:*:*:*4.2.5 p231_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p232_rc1:*:*:*:*:*:*4.2.5 p232_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p233_rc1:*:*:*:*:*:*4.2.5 p233_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p234_rc1:*:*:*:*:*:*4.2.5 p234_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p235_rc1:*:*:*:*:*:*4.2.5 p235_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p236_rc1:*:*:*:*:*:*4.2.5 p236_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p237_rc1:*:*:*:*:*:*4.2.5 p237_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p238_rc1:*:*:*:*:*:*4.2.5 p238_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p239_rc1:*:*:*:*:*:*4.2.5 p239_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p240_rc1:*:*:*:*:*:*4.2.5 p240_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p241_rc1:*:*:*:*:*:*4.2.5 p241_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p242_rc1:*:*:*:*:*:*4.2.5 p242_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p243_rc1:*:*:*:*:*:*4.2.5 p243_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p244_rc1:*:*:*:*:*:*4.2.5 p244_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p245_rc1:*:*:*:*:*:*4.2.5 p245_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p246_rc1:*:*:*:*:*:*4.2.5 p246_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p247_rc1:*:*:*:*:*:*4.2.5 p247_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p248_rc1:*:*:*:*:*:*4.2.5 p248_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p249_rc1:*:*:*:*:*:*4.2.5 p249_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p250_rc1:*:*:*:*:*:*4.2.5 p250_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*4.2.8 p1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*4.2.8 p1-beta1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*4.2.8 p1-beta2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*4.2.8 p1-beta3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*4.2.8 p1-beta4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*4.2.8 p1-beta5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*4.2.8 p1-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*4.2.8 p1-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*4.2.8 p2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*4.2.8 p2-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*4.2.8 p2-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*4.2.8 p2-rc3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*4.2.8 p3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*4.2.8 p3-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*4.2.8 p3-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*4.2.8 p3-rc3VulnerableNTP Project
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*7.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:clustered_data_ontap:*:*not specified by NVDVulnerableNetApp
cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:o:netapp:data_ontap:-:*:*:*:*:7-mode:*:*not specified by NVDVulnerableNetApp
  • cpe:2.3:a:ntp:ntp:4.2.5:p195:*:*:*:*:*:* Versions 4.2.5 p195 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p196:*:*:*:*:*:* Versions 4.2.5 p196 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p197:*:*:*:*:*:* Versions 4.2.5 p197 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p198:*:*:*:*:*:* Versions 4.2.5 p198 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p199:*:*:*:*:*:* Versions 4.2.5 p199 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p200:*:*:*:*:*:* Versions 4.2.5 p200 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p201:*:*:*:*:*:* Versions 4.2.5 p201 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p202:*:*:*:*:*:* Versions 4.2.5 p202 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p203:*:*:*:*:*:* Versions 4.2.5 p203 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p204:*:*:*:*:*:* Versions 4.2.5 p204 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p205:*:*:*:*:*:* Versions 4.2.5 p205 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p206:*:*:*:*:*:* Versions 4.2.5 p206 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p207:*:*:*:*:*:* Versions 4.2.5 p207 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p208:*:*:*:*:*:* Versions 4.2.5 p208 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p209:*:*:*:*:*:* Versions 4.2.5 p209 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p210:*:*:*:*:*:* Versions 4.2.5 p210 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p211:*:*:*:*:*:* Versions 4.2.5 p211 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p212:*:*:*:*:*:* Versions 4.2.5 p212 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p213:*:*:*:*:*:* Versions 4.2.5 p213 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p214:*:*:*:*:*:* Versions 4.2.5 p214 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p215:*:*:*:*:*:* Versions 4.2.5 p215 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p216:*:*:*:*:*:* Versions 4.2.5 p216 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p217:*:*:*:*:*:* Versions 4.2.5 p217 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p218:*:*:*:*:*:* Versions 4.2.5 p218 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p219:*:*:*:*:*:* Versions 4.2.5 p219 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p220:*:*:*:*:*:* Versions 4.2.5 p220 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p221:*:*:*:*:*:* Versions 4.2.5 p221 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p222:*:*:*:*:*:* Versions 4.2.5 p222 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p223:*:*:*:*:*:* Versions 4.2.5 p223 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p224:*:*:*:*:*:* Versions 4.2.5 p224 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p225:*:*:*:*:*:* Versions 4.2.5 p225 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p226:*:*:*:*:*:* Versions 4.2.5 p226 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p227:*:*:*:*:*:* Versions 4.2.5 p227 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p228:*:*:*:*:*:* Versions 4.2.5 p228 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p229:*:*:*:*:*:* Versions 4.2.5 p229 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p230:*:*:*:*:*:* Versions 4.2.5 p230 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p231_rc1:*:*:*:*:*:* Versions 4.2.5 p231_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p232_rc1:*:*:*:*:*:* Versions 4.2.5 p232_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p233_rc1:*:*:*:*:*:* Versions 4.2.5 p233_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p234_rc1:*:*:*:*:*:* Versions 4.2.5 p234_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p235_rc1:*:*:*:*:*:* Versions 4.2.5 p235_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p236_rc1:*:*:*:*:*:* Versions 4.2.5 p236_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p237_rc1:*:*:*:*:*:* Versions 4.2.5 p237_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p238_rc1:*:*:*:*:*:* Versions 4.2.5 p238_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p239_rc1:*:*:*:*:*:* Versions 4.2.5 p239_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p240_rc1:*:*:*:*:*:* Versions 4.2.5 p240_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p241_rc1:*:*:*:*:*:* Versions 4.2.5 p241_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p242_rc1:*:*:*:*:*:* Versions 4.2.5 p242_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p243_rc1:*:*:*:*:*:* Versions 4.2.5 p243_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p244_rc1:*:*:*:*:*:* Versions 4.2.5 p244_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p245_rc1:*:*:*:*:*:* Versions 4.2.5 p245_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p246_rc1:*:*:*:*:*:* Versions 4.2.5 p246_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p247_rc1:*:*:*:*:*:* Versions 4.2.5 p247_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p248_rc1:*:*:*:*:*:* Versions 4.2.5 p248_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p249_rc1:*:*:*:*:*:* Versions 4.2.5 p249_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p250_rc1:*:*:*:*:*:* Versions 4.2.5 p250_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:* Versions 4.2.8 p1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:* Versions 4.2.8 p1-beta1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:* Versions 4.2.8 p1-beta2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:* Versions 4.2.8 p1-beta3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:* Versions 4.2.8 p1-beta4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:* Versions 4.2.8 p1-beta5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:* Versions 4.2.8 p1-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:* Versions 4.2.8 p1-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:* Versions 4.2.8 p2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:* Versions 4.2.8 p2-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:* Versions 4.2.8 p2-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:* Versions 4.2.8 p2-rc3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:* Versions 4.2.8 p3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:* Versions 4.2.8 p3-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:* Versions 4.2.8 p3-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:* Versions 4.2.8 p3-rc3 Vulnerable ·NTP Project
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:clustered_data_ontap:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:o:netapp:data_ontap:-:*:*:*:*:7-mode:*:* Versions not specified by NVD Vulnerable ·NetApp

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 3 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-7871
  2. 2026-10-03 Alias added: GHSA-mxc3-mjx4-gjc9

References

Advisory 7

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences