CVE-2015-7848

Fixed in a distro release EPSS 6%

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.

Published 2017-01-06 · CVE record · OSV

Products: netapp clustered_data_ontap, netapp data_ontap_operating_in_7-mode, netapp oncommand_balance, netapp oncommand_performance_manager, netapp oncommand_unified_manager, ntp

Distro releases