Is CVE-2015-7979 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2015-7979 being exploited in the wild.

How severe is CVE-2015-7979?

High severity, with a CVSS score of 7.5, published 30 January 2017.

Which products and versions are affected?

NTP Project NTP before 4.2.8p6, 4.3.x before 4.3.90.

Is there a fix for CVE-2015-7979?

A patch was published on 2016-01-19: NTP 4.2.8p6 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2015-7979 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2015-7979?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2015-7979: NTP Project NTP denial of service in broadcast client association

CVE-2015-7979 · Severity: high · CVSS 7.5 · Published 2017-01-30

A vulnerability in the Network Time Protocol (NTP) software can allow a remote attacker to disrupt time synchronization services. By sending specially crafted packets, an attacker can force a client to disconnect from its time server. This can lead to inaccurate system clocks, which may cause security certificate errors, log inconsistencies, and the failure of time-sensitive applications.

Quick answers

Is CVE-2015-7979 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2015-7979 being exploited in the wild.
How severe is CVE-2015-7979?: High severity, with a CVSS score of 7.5, published 30 January 2017.
Which products and versions are affected?: NTP Project NTP before 4.2.8p6, 4.3.x before 4.3.90.
Is there a fix for CVE-2015-7979?: A patch was published on 2016-01-19: NTP 4.2.8p6 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2015-7979 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2015-7979?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A denial of service vulnerability exists in NTP's handling of broadcast mode. A remote, unauthenticated attacker can send broadcast packets containing invalid authentication metadata to a client configured to receive broadcast time updates. This causes the client to tear down its existing association with the legitimate time server. The vulnerability affects NTP versions prior to 4.2.8p6 and the 4.3.x development branch prior to 4.3.90. Successful exploitation results in a loss of time synchronization availability for the affected client.

Affected products

NTP Project NTP before 4.2.8p6, 4.3.x before 4.3.90

Timeline

2016-01-19: patched: NTP 4.2.8p6 released
2017-01-30: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.