CVE-2015-7691

High

Published: 07/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations.

Risk Assessment

This vulnerability may lead to a crash of the NTP server, which can disrupt time synchronization within the organization.

Recommendation

It is recommended to upgrade to NTP version 4.2.8p4 or 4.3.77 to mitigate this vulnerability.

Other vulnerabilities in NTP daemon (ntpd)

CVE-2015-7871Critical
Crypto-NAK packets in ntpd in NTP versions 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77 allow remote attackers to bypass authentication.

Original NVD description (English source)

The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.