CVE-2015-7705

Summary

CVECVE-2015-7705
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2017-08-07 20:29:00 UTC
Updated2021-11-17 22:15:00 UTC
DescriptionThe rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.

Risk And Classification

Problem Types: CWE-20

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Application Citrix Xenserver 6.0.2 All All All
Application Citrix Xenserver 6.2.0 - All All
Application Citrix Xenserver 6.5 - All All
Application Citrix Xenserver 7.0 All All All
Application Citrix Xenserver 6.0.2 All All All
Application Citrix Xenserver 6.2.0 - All All
Application Citrix Xenserver 6.5 - All All
Application Citrix Xenserver 7.0 All All All
Operating System Netapp Clustered Data Ontap - All All All
Operating System Netapp Clustered Data Ontap - All All All
Operating System Netapp Data Ontap - All All All
Operating System Netapp Data Ontap - All All All
Application Netapp Oncommand Performance Manager - All All All
Application Netapp Oncommand Performance Manager - All All All
Application Netapp Oncommand Unified Manager - All All All
Application Netapp Oncommand Unified Manager - All All All
Application Ntp Ntp All All All All
Application Ntp Ntp 4.2.8 - All All
Application Ntp Ntp 4.2.8 p1 All All
Application Ntp Ntp 4.2.8 p1-beta1 All All
Application Ntp Ntp 4.2.8 p1-beta2 All All
Application Ntp Ntp 4.2.8 p1-beta3 All All
Application Ntp Ntp 4.2.8 p1-beta4 All All
Application Ntp Ntp 4.2.8 p1-beta5 All All
Application Ntp Ntp 4.2.8 p1-rc1 All All
Application Ntp Ntp 4.2.8 p1-rc2 All All
Application Ntp Ntp 4.2.8 p2 All All
Application Ntp Ntp 4.2.8 p2-rc1 All All
Application Ntp Ntp 4.2.8 p2-rc2 All All
Application Ntp Ntp 4.2.8 p2-rc3 All All
Application Ntp Ntp 4.2.8 p3 All All
Application Ntp Ntp 4.2.8 p3-rc1 All All
Application Ntp Ntp 4.2.8 p3-rc2 All All
Application Ntp Ntp 4.2.8 p3-rc3 All All
Application Ntp Ntp All All All All
Application Ntp Ntp 4.2.8 - All All
Application Ntp Ntp 4.2.8 p1 All All
Application Ntp Ntp 4.2.8 p1-beta1 All All
Application Ntp Ntp 4.2.8 p1-beta2 All All
Application Ntp Ntp 4.2.8 p1-beta3 All All
Application Ntp Ntp 4.2.8 p1-beta4 All All
Application Ntp Ntp 4.2.8 p1-beta5 All All
Application Ntp Ntp 4.2.8 p1-rc1 All All
Application Ntp Ntp 4.2.8 p1-rc2 All All
Application Ntp Ntp 4.2.8 p2 All All
Application Ntp Ntp 4.2.8 p2-rc1 All All
Application Ntp Ntp 4.2.8 p2-rc2 All All
Application Ntp Ntp 4.2.8 p2-rc3 All All
Application Ntp Ntp 4.2.8 p3 All All
Application Ntp Ntp 4.2.8 p3-rc1 All All
Application Ntp Ntp 4.2.8 p3-rc2 All All
Application Ntp Ntp 4.2.8 p3-rc3 All All
Hardware Siemens Tim 4r-ie - All All All
Hardware Siemens Tim 4r-ie Dnp3 - All All All
Operating System Siemens Tim 4r-ie Dnp3 Firmware All All All All
Operating System Siemens Tim 4r-ie Firmware All All All All

References

ReferenceSourceLinkTags
[security-announce] openSUSE-SU-2016:1329-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists SUSE lists.opensuse.org
Network Time Protocol CVE-2015-7705 Denial of Service Vulnerability BID www.securityfocus.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2016:1247-1: important: Security update for SUSE lists.opensuse.org
USN-2783-1: NTP vulnerabilities | Ubuntu UBUNTU www.ubuntu.com
Siemens SIMATIC NET CP 443-1 OPC UA | CISA MISC us-cert.cisa.gov
[security-announce] SUSE-SU-2016:1568-1: important: Security update for SUSE lists.opensuse.org
Arista - Security Advisory 0016 MISC www.arista.com
Citrix XenServer Multiple Security Updates CONFIRM support.citrix.com Third Party Advisory
SecurityFocus BUGTRAQ www.securityfocus.com
NTP: Multiple vulnerabilities (GLSA 201607-15) — Gentoo Security GENTOO security.gentoo.org Third Party Advisory, VDB Entry
SecurityFocus BUGTRAQ www.securityfocus.com
October 2015 Network Time Protocol Daemon (ntpd) Vulnerabilities in Multiple NetApp Products | NetApp Product Security CONFIRM security.netapp.com Third Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf CONFIRM cert-portal.siemens.com
openSUSE-SU-2016:1423-1: moderate: Security update for ntp SUSE lists.opensuse.org
openSUSE-SU-2015:2016-1: moderate: Security update for ntp SUSE lists.opensuse.org
Broadcom Support Portal CONFIRM bto.bluecoat.com
Siemens TIM 4R-IE Devices | CISA MISC us-cert.cisa.gov
eprint.iacr.org/2015/1020.pdf MISC eprint.iacr.org Technical Description
support.ntp.org/bin/view/Main/NtpBug2901 CONFIRM support.ntp.org Vendor Advisory
SecurityFocus BUGTRAQ www.securityfocus.com
ntp Multiple Flaws Let Remote Users Deny Service, View Files, and Bypass Authentication to Modify the Time - SecurityTracker SECTRACK www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2016:1471-1: important: Security update for SUSE lists.opensuse.org
[security-announce] SUSE-SU-2016:1311-1: important: Security update for SUSE lists.opensuse.org
Vulnerability Note VU#718152 - NTP.org ntpd contains multiple vulnerabilities CERT-VN www.kb.cert.org Third Party Advisory, US Government Resource
SecurityFocus BUGTRAQ www.securityfocus.com
[security-announce] SUSE-SU-2016:1278-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists SUSE lists.opensuse.org
[security-announce] SUSE-SU-2016:1912-1: important: Security update for SUSE lists.opensuse.org
Slackware Security Advisory - ntp Updates ≈ Packet Storm MISC packetstormsecurity.com
[security-announce] SUSE-SU-2016:1291-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists SUSE lists.opensuse.org
[security-announce] SUSE-SU-2016:2094-1: important: Security update for SUSE lists.opensuse.org
1274184 – (CVE-2015-7705) CVE-2015-7705 ntp: denial of service by trigerring rate limiting on NTP server CONFIRM bugzilla.redhat.com Issue Tracking, Third Party Advisory, VDB Entry
Attacking the Network Time Protocol MISC www.cs.bu.edu Not Applicable
support.ntp.org/bin/view/Main/SecurityNotice CONFIRM support.ntp.org Release Notes, Vendor Advisory
Document Display | HPE Support Center CONFIRM h20566.www2.hpe.com Third Party Advisory, VDB Entry
cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf CONFIRM cert-portal.siemens.com
Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015 CISCO tools.cisco.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 590349 Rockwell Automation Stratix 5900 Multiple Vulnerabilities (ICSA-17-094-04)
  • 590721 Siemens TIM 4R-IE Devices Multiple Vulnerabilities (ICSA-21-103-11)
  • 590736 Siemens SIMATIC NET CP 443-1 OPC UA Multiple Vulnerabilities (ICSA-21-159-11)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report