Network Time Protocol is prone to a denial-of-service vulnerability.
A remote attacker may exploit this issue to cause a denial-of-service condition, denying service to legitimate users.
Information
Slackware Linux x86_64 -current
Slackware Linux 14.1 x86_64
Slackware Linux 14.0 x86_64
Slackware Linux 14.0
Slackware Linux 13.37 x86_64
Slackware Linux 13.37
Slackware Linux 13.1 x86_64
Slackware Linux 13.1
Slackware Linux 13.0 x86_64
Slackware Linux 13.0
Slackware Linux -current
Siemens RuggedCom ROX 2.6.3
Siemens RuggedCom ROX 2.6.2
Siemens RuggedCom ROX 2.0
Siemens RuggedCom ROX 1.16
Siemens RuggedCom ROX 1.14.5
Siemens RuggedCom ROX 1.0
Rockwell Automation Stratix 5900 0
NTP NTP 4.3.25
NTP NTP 4.3
NTP NTP 4.2.8
NTP NTP 4.2.6
NTP NTP 4.3.70
NTP NTP 4.2.8p3
NTP NTP 4.2.8p2
NTP NTP 4.2.7p366
NTP NTP 4.2.7p111
NTP NTP 4.2.7p11
NTP NTP 4.2.5p186
Juniper Junos OS 0
IBM Vios 2.2.1 4
IBM Vios 2.2
IBM Vios 2.2.4.0
IBM Vios 2.2.3.50
IBM Vios 2.2.3.4
IBM Vios 2.2.3.3
IBM Vios 2.2.3.2
IBM Vios 2.2.3.0
IBM Vios 2.2.2.6
IBM Vios 2.2.2.5
IBM Vios 2.2.2.4
IBM Vios 2.2.2.0
IBM Vios 2.2.1.9
IBM Vios 2.2.1.8
IBM Vios 2.2.1.3
IBM Vios 2.2.1.1
IBM Vios 2.2.1.0
IBM Vios 2.2.0.13
IBM Vios 2.2.0.12
IBM Vios 2.2.0.11
IBM Vios 2.2.0.10
IBM QLogic Virtual Fabric Extension Module for IBM BladeCenter 9.0
IBM QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module 7.10
IBM IB6131 8 Gb Infiniband Switch 3.4
IBM IB6131 8 Gb Infiniband Switch 3.2
IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru 9.1.0.00
IBM Flex System EN6131 40Gb Ethernet Switch 3.4
IBM Flex System EN6131 40Gb Ethernet Switch 3.2
IBM DS8800 86.31.167.0 (R6.3)
IBM DS8800 0
IBM DS8700 87.51.14.X (R7.5)
IBM DS8700 87.41.17.X (R7.4)
IBM DS8700 76.31.143.0 (R6.3)
IBM Aix 7.2
IBM Aix 7.1.4
IBM Aix 7.1.3
IBM AIX 7.1.2
IBM AIX 7.1.1
IBM AIX 7.1 6
IBM AIX 7.1
IBM Aix 6.1.9
IBM AIX 6.1.8
IBM AIX 6.1.7 5
IBM AIX 6.1.6 8
IBM AIX 6.1.6
IBM AIX 6.1.5
IBM AIX 6.1.4
IBM AIX 6.1.3
IBM AIX 6.1.2
IBM AIX 6.1.1
IBM AIX 5.3.12 6
IBM AIX 5.3.10
IBM AIX 5.3.9
IBM AIX 5.3.8
IBM AIX 5.3.7
IBM Aix 7.2.0.1
IBM Aix 7.1.4.1
IBM Aix 7.1.3.5
IBM Aix 7.1.2.6
IBM AIX 7.1.2.15
IBM AIX 7.1.1.5
IBM AIX 7.1.1.16
IBM Aix 6.1.9.6
IBM Aix 6.1.9.5
IBM Aix 6.1.8.7
IBM Aix 6.1.8.6
IBM AIX 6.1.8.15
IBM AIX 6.1.7.16
IBM Aix 5.3.12.9
IBM AIX 5.3.12
IBM AIX 5.3.11
HP VSR1008 Comware 7 Virtual Services Router 0
HP VSR1004 Comware 7 Virtual Services Router 0
HP VSR1001 Virtual Services Router 60 Day Evaluation Software 0
HP VSR1001 Comware 7 Virtual Services Router 0
HP MSR4080 Router Chassis 0
HP MSR4060 Router Chassis 0
HP MSR4000 TAA-compliant MPU-100 Main Processing Unit 0
HP MSR4000 MPU-100 Main Processing Unit 0
HP MSR3064 Router 0
HP MSR3044 Router 0
HP MSR3024 TAA-compliant AC Router 0
HP MSR3024 PoE Router 0
HP MSR3024 DC Router 0
HP MSR3024 AC Router 0
HP MSR3012 DC Router 0
HP MSR3012 AC Router 0
HP MSR2004-48 Router 0
HP MSR2004-24 AC Router 0
HP MSR2003 TAA-compliant AC Router 0
HP MSR2003 AC Router 0
HP MSR1003-8S AC Router 0
HP MSR1002-4 AC Router 0
HP HSR6808 Router Chassis 0
HP HSR6804 Router Chassis 0
HP HSR6802 Router Chassis 0
HP HSR6800 RSE-X3 Router Main Processing Unit 0
HP HSR6800 RSE-X2 Router TAA-compliant Main Processing 0
HP HSR6800 RSE-X2 Router Main Processing Unit 0
HP HSR6602-XG TAA-compliant Router 0
HP HSR6602-XG Router 0
HP HSR6602-G TAA-compliant Router 0
HP HSR6602-G Router 0
HP FlexFabric 7910 TAA-compliant Switch Chassis 0
HP FlexFabric 7910 Switch Chassis 0
HP FlexFabric 7910 7.2Tbps TAA-compliant Fabric/Main Processing Uni 0
HP FlexFabric 7910 7.2Tbps Fabric / Main Processing Unit 0
HP FlexFabric 7910 2.4Tbps TAA-compliant Fabric/Main Processing Uni 0
HP FlexFabric 7910 2.4Tbps Fabric / Main Processing Unit 0
HP FlexFabric 7904 TAA-compliant Switch Chassis 0
HP FlexFabric 7904 Switch Chassis 0
HP FlexFabric 5930 4-slot TAA-compliant Switch 0
HP FlexFabric 5930 4-slot Switch 0
HP FlexFabric 5930 32QSFP+ TAA-compliant Switch 0
HP FlexFabric 5930 32QSFP+ Switch 0
HP FlexFabric 5930 2QSFP+ 2-slot TAA-compliant Switch 0
HP FlexFabric 5930 2QSFP+ 2-slot Switch 0
HP FlexFabric 5900CP 48XG 4QSFP+ TAA-Compliant 0
HP FlexFabric 5700-48G-4XG-2QSFP+ TAA-compliant Switch 0
HP FlexFabric 5700-48G-4XG-2QSFP+ Switch 0
HP FlexFabric 5700-40XG-2QSFP+ TAA-compliant Switch 0
HP FlexFabric 5700-40XG-2QSFP+ Switch 0
HP FlexFabric 5700-32XGT-8XG-2QSFP+ TAA-compliant Switch 0
HP FlexFabric 5700-32XGT-8XG-2QSFP+ Switch 0
HP FlexFabric 12916E Switch Chassis 0
HP FlexFabric 12916 Switch AC Chassis 0
HP FlexFabric 12916 Main Processing Unit 0
HP FlexFabric 12910 TAA-compliant Switch AC Chassis 0
HP FlexFabric 12910 TAA-compliant Main Processing Unit 0
HP FlexFabric 12910 Switch AC Chassis 0
HP FlexFabric 12910 Main Processing Unit 0
HP FlexFabric 12908E Switch Chassis 0
HP FlexFabric 12904E Switch Chassis 0
HP FlexFabric 12904E Main Processing Unit 0
HP FlexFabric 12900E Main Processing Unit 0
HP FlexFabric 11908-V Switch Chassis 0
HP FlexFabric 11900 Main Processing Unit 0
HP FF 5900CP-48XG-4QSFP+ Switch 0
HP FF 12518E DC Switch Chassis 0
HP FF 12518E AC Switch Chassis 0
HP FF 12508E DC Switch Chassis 0
HP FF 12508E AC Switch Chassis 0
HP FF 12500E MPU 0
HP A12518 Switch Chassis 0
HP A12508 Switch Chassis 0
HP 7510 Switch Chassis 0
HP 7506 Switch Chassis 0
HP 7503 Switch Chassis 0
HP 7502 Switch Chassis 0
HP 7502 Main Processing Unit 0
HP 5920AF-24XG TAA Switch 0
HP 5920AF-24XG Switch 0
HP 5900AF-48XGT-4QSFP+ Switch 0
HP 5900AF-48XG-4QSFP+ TAA Switch 0
HP 5900AF-48XG-4QSFP+ Switch 0
HP 5900AF-48G-4XG-2QSFP+ Switch 0
HP 5900AF 48XGT 4QSFP+ TAA-Compliant Switch 0
HP 5900AF 48G 4XG 2QSFP+ TAA-Compliant 0
HP 5510 48G PoE+ 4SFP+ HI 1-slot Switch 0
HP 5510 48G 4SFP+ HI 1-slot Switch 0
HP 5510 24G SFP 4SFP+ HI 1-slot Switch 0
HP 5510 24G PoE+ 4SFP+ HI 1-slot Switch 0
HP 5510 24G 4SFP+ HI 1-slot Switch 0
HP 5130-48G-PoE+-4SFP+ (370W) EI Switch 0
HP 5130-48G-PoE+-4SFP+ (370W) EI Brazil Switch 0
HP 5130-48G-PoE+-2SFP+-2XGT (370W) EI Switch 0
HP 5130-48G-4SFP+ EI Switch 0
HP 5130-48G-4SFP+ EI Brazil Switch 0
HP 5130-48G-2SFP+-2XGT EI Switch 0
HP 5130-24G-SFP-4SFP+ EI Switch 0
HP 5130-24G-PoE+-4SFP+ (370W) EI Switch 0
HP 5130-24G-PoE+-4SFP+ (370W) EI Brazil Switch 0
HP 5130-24G-PoE+-2SFP+-2XGT (370W) EI Switch 0
HP 5130-24G-4SFP+ EI Switch 0
HP 5130-24G-4SFP+ EI Brazil Switch 0
HP 5130-24G-2SFP+-2XGT EI Switch 0
HP 5130 48G PoE+ 4SFP+ 1-slot HI Switch 0
HP 5130 48G 4SFP+ 1-slot HI Switch 0
HP 5130 24G PoE+ 4SFP+ 1-slot HI Switch 0
HP 5130 24G 4SFP+ 1-slot HI Switch 0
HP 1950-48G-2SFP+-2XGT-PoE+(370W) Switch 0
HP 1950-48G-2SFP+-2XGT Switch 0
HP 1950-24G-4XG Switch 0
HP 1950-24G-2SFP+-2XGT-PoE+(370W) Switch 0
HP 12518 Switch Chassis 0
HP 12518 DC Switch Chassis 0
HP 12518 AC Switch Chassis 0
HP 12508 Switch Chassis 0
HP 12508 DC Switch Chassis 0
HP 12508 AC Switch Chassis 0
HP 12504 DC Switch Chassis 0
HP 12504 AC Switch Chassis 0
HP 12500 MPU w/Comware V7 OS 0
HP 12500 Main Processing Unit 0
HP 10512 TAA Switch Chassis 0
HP 10512 Switch Chassis 0
HP 10508-V TAA Switch Chassis 0
HP 10508-V Switch Chassis 0
HP 10508 TAA Switch Chassis 0
HP 10508 Switch Chassis 0
HP 10504 TAA Switch Chassis 0
HP 10504 Switch Chassis 0
HP 10500 Type D TAA-compliant with Comware v7 OS Main Processing Un 0
HP 10500 Type D Main Processing Unit with Comware v7 OS 0
HP 10500 Type A MPU w/Comware v7 OS 0
FreeBSD Freebsd 9.3-RELEASE-p9
FreeBSD FreeBSD 9.3-RELEASE-p6
FreeBSD FreeBSD 9.3-RELEASE-p5
FreeBSD FreeBSD 9.3-RELEASE-p3
FreeBSD Freebsd 9.3-RELEASE-p25
FreeBSD Freebsd 9.3-RELEASE-p24
FreeBSD Freebsd 9.3-RELEASE-p22
FreeBSD Freebsd 9.3-RELEASE-p21
FreeBSD FreeBSD 9.3-RELEASE-p2
FreeBSD Freebsd 9.3-RELEASE-p13
FreeBSD Freebsd 9.3-RELEASE-p10
FreeBSD FreeBSD 9.3-RELEASE-p1
FreeBSD FreeBSD 9.3-RC3-p1
FreeBSD FreeBSD 9.3-RC2-p1
FreeBSD FreeBSD 9.3-RC2
FreeBSD FreeBSD 9.3-RC1-p2
FreeBSD FreeBSD 9.3-RC
FreeBSD FreeBSD 9.3-PRERELEASE
FreeBSD FreeBSD 9.3-BETA3-p2
FreeBSD FreeBSD 9.3-BETA1-p2
FreeBSD FreeBSD 9.3-BETA1-p1
FreeBSD FreeBSD 9.3-BETA1
FreeBSD FreeBSD 9.3
FreeBSD Freebsd 10.2-RC2-p1
FreeBSD Freebsd 10.2-RC1-p2
FreeBSD Freebsd 10.2-RC1-p1
FreeBSD Freebsd 10.2-PRERELEASE
FreeBSD Freebsd 10.2-BETA2-p3
FreeBSD Freebsd 10.2-BETA2-p2
FreeBSD Freebsd 10.2
FreeBSD FreeBSD 10.1-STABLE
FreeBSD Freebsd 10.1-RELENG
FreeBSD Freebsd 10.1-RELEASE-p9
FreeBSD Freebsd 10.1-RELEASE-p6
FreeBSD Freebsd 10.1-RELEASE-p5
FreeBSD Freebsd 10.1-RELEASE-p19
FreeBSD Freebsd 10.1-RELEASE-p17
FreeBSD Freebsd 10.1-RELEASE-p16
FreeBSD FreeBSD 10.1-RELEASE-p1
FreeBSD Freebsd 10.1-RELEASE
FreeBSD FreeBSD 10.1-RC4-p1
FreeBSD FreeBSD 10.1-RC3-p1
FreeBSD FreeBSD 10.1-RC2-p3
FreeBSD FreeBSD 10.1-RC2-p1
FreeBSD FreeBSD 10.1-RC1-p1
FreeBSD FreeBSD 10.1-PRERELEASE
FreeBSD FreeBSD 10.1-BETA3-p1
FreeBSD FreeBSD 10.1-BETA1-p1
FreeBSD FreeBSD 10.1
Extremenetworks Summit WM3000 Series 0
Extremenetworks Purview Appliance 6.4
Extremenetworks Purview Appliance 6.3
Extremenetworks NetSight Appliance 6.3
Extremenetworks NetSight Appliance 6.0
Extremenetworks NAC Appliance 6.3
Extremenetworks NAC Appliance 6.0
Extremenetworks ExtremeXOS 16.1.2
Extremenetworks ExtremeXOS 15.7.4
Extremenetworks ExtremeXOS 15.7.3 Patch 8
Extremenetworks ExtremeXOS 15.7.3 Patch 1
Extremenetworks ExtremeXOS 15.7.2
Extremenetworks ExtremeXOS 15.7
Extremenetworks ExtremeXOS 15.6.4
Extremenetworks ExtremeXOS 16.1
Extremenetworks ExtremeXOS 15.4.1.3-patch1-10
Extremenetworks ExtremeXOS 15.4.1.0
Extremenetworks ExtremeXOS 15.3
Debian Linux 6.0 sparc
Debian Linux 6.0 s/390
Debian Linux 6.0 powerpc
Debian Linux 6.0 mips
Debian Linux 6.0 ia-64
Debian Linux 6.0 ia-32
Debian Linux 6.0 arm
Debian Linux 6.0 amd64
Rockwell Automation Stratix 5900 15.6.3
NTP NTP 4.3.77
NTP NTP 4.2.8p4
IBM QLogic Virtual Fabric Extension Module for IBM BladeCenter 9.0.3.14.0
IBM QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module 7.10.1.37.00
IBM IB6131 8 Gb Infiniband Switch 3.5.1000
IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru 9.1.7.03.00
IBM Flex System EN6131 40Gb Ethernet Switch 3.5.1000
FreeBSD FreeBSD 9.3-STABLE
FreeBSD Freebsd 9.3-RELEASE-p29
FreeBSD Freebsd 10.2-STABLE
FreeBSD Freebsd 10.2-RELEASE-p6
FreeBSD Freebsd 10.1-RELEASE-p23
Extremenetworks Purview Appliance 7.0.3
Extremenetworks NetSight Appliance 6.4
Extremenetworks NAC Appliance 6.4
Extremenetworks ExtremeXOS 21.1.1
Extremenetworks ExtremeXOS 16.2
Exploit
The following exploit code is available:
References:
- Bug 1274264 - (CVE-2015-7855) CVE-2015-7855 ntp: ASSERT in decodenetnum() on inv (Red Hat Bugzilla)
- NTP 4.2.8p4 Focus: Security, Bug fies, enhancements. (NTP)
- Ntp Homepage (Dave Mills)
- October 2015 NTP Security Vulnerability Announcement (Medium) (NTP)
- 2015-10 Out of Cycle Security Bulletin: NTP.org announcement of multiple vulnera (Juniper)
- Advisory (ICSA-17-094-04)Rockwell Automation Stratix 5900 (CERT)
- cisco-sa-20151021-ntp: Multiple Vulnerabilities in ntpd Affecting Cisco Products (Cisco)
- Extreme Networks - Multiple NTP Vulnerabilities (Extreme Networks)
- FreeBSD Security Advisory FreeBSD-SA-15:25.ntp (FreeBSD)
- HPSBHF03646 rev.1 - HPE Comware 7 (CW7) Network Products running NTP, Multiple R (HP)
- IBM SECURITY ADVISORY (IBM)
- Multiple vulnerabilities impact System Storage DS8000 Hardware Management Consol (IBM)
- Security Bulletin: Vulnerabilities in NTP affect IBM Flex System FC3171 8Gb SAN (IBM)
- Security Bulletin: Vulnerabilities in NTP and GNU C Library (glibc) affect IBM F (IBM)