cve/2015/CVE-2015-7853.md

CVE-2015-7853

Description

The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.

POC

Reference

• http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html
• http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html

Github

No PoCs found on GitHub currently.