{"id":"CVE-2015-7702","published":"2017-08-07T20:00:00Z","modified":"2024-08-06T07:58:59Z","title":"The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause…","vendor":null,"product":null,"tier":"tail","description":{"text":"The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.05207,"percentile":0.92462,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/77286","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","tags":["x_refsource_CONFIRM"]},{"url":"http://support.ntp.org/bin/view/Main/NtpBug2899","tags":["x_refsource_CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2583.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securitytracker.com/id/1033951","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0780.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.debian.org/security/2015/dsa-3388","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://security.gentoo.org/glsa/201607-15","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"https://security.netapp.com/advisory/ntap-20171004-0001/","tags":["x_refsource_CONFIRM"]}],"priority":{"score":18.5,"factors":[{"name":"EPSS percentile","points":18.49}]},"euvd":{"id":"EUVD-2015-7603","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2014-9750-family-cve-2014-9750","parents":[{"from":"CVE-2014-9750","to":"CVE-2015-7702","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.","from":"CVE.org","in":"CVE-2015-7702"}]}]}}