CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a…

published January 30, 2017

CVSS
—
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.8th percentile
Published
2017-01-30T21:00Z
EPSS history
Timeline
  • 30 JAN 21:00Z
    The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a…
    cvelistv5