5.9

CVE-2015-7977: canonical ubuntu_linux NULL Pointer Dereference

CVSS: 5.9v3.1MediumModified
AliasesUBUNTU-CVE-2015-7977DEBIAN-CVE-2015-7977
Published 30-01-2017Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2015-7977 is a medium (CVSS 5.9) NULL Pointer Dereference vulnerability in canonical ubuntu_linux. EPSS estimates a 6.30% chance of exploitation in the next 30 days, higher than 93.5% of scored vulnerabilities.

Overall risk
25/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.9/10
010
Medium · v3.1 (NVD)
EPSS score
6.30%
0%100%
Low · -0.05 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 6
DLA-559-1DSA-3629-1MGASA-2016-0039OPENSUSE-SU-2024:10181-1RHSA-2016:0780RHSA-2016:2583

Timeline

  1. 30-01-2017
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.

CVSS metrics

5 scores · 3 sources · 3 versions

EPSS trend

Probability

6.30%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

-0.05 pp

From 6.35% on 18-09-2026

18-09-202618-10-2026
EPSS score
6.30%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian2 products
Netapp2 products
Canonical1 product
Fedoraproject1 product
Freebsd1 product
  • freebsdEOL9.3 | 9.3:p1 | 9.3:p10 | 9.3:p12 | 9.3:p13 | 9.3:p16 | 9.3:p19 | 9.3:p2 | 9.3:p20 | 9.3:p21 | 9.3:p22 | 9.3:p23 | 9.3:p24 | 9.3:p25 | 9.3:p28 | 9.3:p3 | 9.3:p30 | 9.3:p31 | 9.3:p32 | 9.3:p33 | 9.3:p34 | 9.3:p5 | 9.3:p6 | 9.3:p7 | 9.3:p8 | 9.3:p9 | 10.1 | 10.1:p1 | 10.1:p10 | 10.1:p12 | 10.1:p15 | 10.1:p16 | 10.1:p17 | 10.1:p18 | 10.1:p19 | 10.1:p2 | 10.1:p22 | 10.1:p24 | 10.1:p25 | 10.1:p26 | 10.1:p27 | 10.1:p3 | 10.1:p4 | 10.1:p5 | 10.1:p6 | 10.1:p7 | 10.1:p8 | 10.1:p9 | 10.2 | 10.2:p1 | 10.2:p10 | 10.2:p2 | 10.2:p5 | 10.2:p7 | 10.2:p8 | 10.2:p9
Ntp1 product
  • ntp≤ 4.2.8 | ≥ 4.3.0, < 4.3.90 | 4.2.8 | 4.2.8:p1 | 4.2.8:p1-beta1 | 4.2.8:p1-beta2 | 4.2.8:p1-beta3 | 4.2.8:p1-beta4 | 4.2.8:p1-beta5 | 4.2.8:p1-rc1 | 4.2.8:p1-rc2 | 4.2.8:p2 | 4.2.8:p2-rc1 | 4.2.8:p2-rc2 | 4.2.8:p2-rc3 | 4.2.8:p3 | 4.2.8:p3-rc1 | 4.2.8:p3-rc2 | 4.2.8:p3-rc3 | 4.2.8:p4 | 4.2.8:p5
Oracle1 product
Siemens1 product
Ubuntu1 product
  • ntp< 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 | < 1:4.2.8p4+dfsg-3ubuntu5.3

9 vendors · 11 products

References

33 links
Show all 33 references