CVE-2015-7853: Buffer Overflow
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.
Other sources
The following flaw was found in ntpd:
A potential buffer overflow vulnerability exists in the refclock of ntpd. An invalid length provided by a hardware reference clock could cause a buffer overflow potentially resulting in memory being modified. A malicious reflock could provide a negative length to trigger this vulnerability.
External References:
http://talosintel.com/reports/TALOS-2015-0064/ http://support.ntp.org/bin/view/Main/SecurityNotice#October2015NTPSecurityVulner
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7853?
CVE-2015-7853 has a high severity as it allows remote attackers to execute arbitrary code or cause a denial of service by exploiting a negative input value.
How do I fix CVE-2015-7853?
To fix CVE-2015-7853, upgrade NTP to version 4.2.8p4 or later, or 4.3.77 or later.
What versions are affected by CVE-2015-7853?
CVE-2015-7853 affects NTP versions 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77.
What is the nature of the vulnerability in CVE-2015-7853?
CVE-2015-7853 is a potential buffer overflow vulnerability due to improper handling of the datalen parameter.
Can CVE-2015-7853 be exploited remotely?
Yes, CVE-2015-7853 can be exploited by remote attackers through malicious input.