cbcvebase.
CVE-2015-7976
published 2017-01-30

CVE-2015-7976: The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows…

PriorityP423medium4.3CVSS 3.0
AVNACLPRLUINSUCNILAN
EPSS
3.51%
87.8th percentile
The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

Affected

108 ranges· showing 25
VendorProductVersion rangeFixed in
debianntp< ntp 1:4.2.8p7+dfsg-1 (bullseye)ntp 1:4.2.8p7+dfsg-1 (bullseye)
novellsuse_openstack_cloud
ntpntp<= 4.2.8
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp
ntpntp

CVSS provenance

nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
osv6.5MEDIUM
vendor_cisco6.5MEDIUM
vendor_ubuntu6.5MEDIUM
vendor_debian4.3LOW
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.