CVE-2015-7853

The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.

• CWE-120

• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html
• http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html
• http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html
• http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html
• http://support.ntp.org/bin/view/Main/NtpBug2920Patch, Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp
• http://www.securityfocus.com/archive/1/536737/100/0/threaded
• http://www.securityfocus.com/archive/1/536760/100/0/threaded
• http://www.securityfocus.com/archive/1/536796/100/0/threaded
• http://www.securityfocus.com/archive/1/536833/100/0/threaded
• http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded
• http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded
• http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded
• http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded
• http://www.securityfocus.com/bid/77273Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033951Third Party Advisory, VDB Entry
• http://www.talosintel.com/vulnerability-reports/
• http://www.ubuntu.com/usn/USN-2783-1
• https://bto.bluecoat.com/security-advisory/sa103
• https://bugzilla.redhat.com/show_bug.cgi?id=1274262Issue Tracking, Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
• https://security.gentoo.org/glsa/201607-15Third Party Advisory, VDB Entry
• https://security.netapp.com/advisory/ntap-20171004-0001/Third Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
• http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html
• http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html
• http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html
• http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html
• http://support.ntp.org/bin/view/Main/NtpBug2920Patch, Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp
• http://www.securityfocus.com/archive/1/536737/100/0/threaded
• http://www.securityfocus.com/archive/1/536760/100/0/threaded
• http://www.securityfocus.com/archive/1/536796/100/0/threaded
• http://www.securityfocus.com/archive/1/536833/100/0/threaded
• http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded
• http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded
• http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded
• http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded
• http://www.securityfocus.com/bid/77273Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033951Third Party Advisory, VDB Entry
• http://www.talosintel.com/vulnerability-reports/
• http://www.ubuntu.com/usn/USN-2783-1
• https://bto.bluecoat.com/security-advisory/sa103
• https://bugzilla.redhat.com/show_bug.cgi?id=1274262Issue Tracking, Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
• https://security.gentoo.org/glsa/201607-15Third Party Advisory, VDB Entry
• https://security.netapp.com/advisory/ntap-20171004-0001/Third Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7847Huawei MBB (Mobile Broadband) product E3272s with software v…
• CVE-2015-7848An integer overflow can occur in NTP-dev.4.3.70 leading to a…7.5
• CVE-2015-7849Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2…8.8
• CVE-2015-7850ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 al…6.5
• CVE-2015-7851Directory traversal vulnerability in the save_config functio…6.5
• CVE-2015-7852ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 al…5.9
• CVE-2015-7854Buffer overflow in the password management functionality in …8.8
• CVE-2015-7855The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p…6.5
• CVE-2015-7856OpenNMS has a default password of rtc for the rtc account, w…
• CVE-2015-7857SQL injection vulnerability in the getListQuery function in …
• CVE-2015-7858SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allo…
• CVE-2015-7859The com_contenthistory component in Joomla! 3.2 before 3.4.5…