{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "LOGO! Soft Comfort toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2019 R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Solid Edge SE2021 versions ant\u00e9rieures \u00e0 SE2021MP4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 443-1 Advanced (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.2.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2019 R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Nucleus NET versions ant\u00e9rieures \u00e0 5.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "TIM 3V-IE / TIM 3V-IE Advanced (incl. SIPLUSNET variants) versions ant\u00e9rieures \u00e0 V2.6.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SiNVR/SiVMS Video Server toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Nucleus RTOS versions contenant le module DNS affect\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 343-1 Advanced (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.0.44",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Solid Edge SE2020 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 343-1 Lean (incl. SIPLUS vari-ants) versions ant\u00e9rieures \u00e0 V3.1.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 443-5 Basic (incl. SIPLUS vari-ants) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Opcenter Quality versions ant\u00e9rieures \u00e0 12.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2019 R1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 443-5 Extended toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "VSTAR versions contenant le module DNS affect\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Control Center Server (CCS) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "TIM 4R-IE (incl. SIPLUS NET variants) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2020 R1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SINEMA Remote Connect Server versions ant\u00e9rieures \u00e0 3.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2020 R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 343-1 Standard (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.1.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 443-1 Standard (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.2.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 342-5 (incl. SIPLUS variants) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2018 R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Nucleus ReadyStart toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Nucleus 4 versions ant\u00e9rieures \u00e0 4.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2018 R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "QMS Automotive versions ant\u00e9rieures \u00e0 12.30",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Tecnomatix RobotExpert versions ant\u00e9rieures \u00e0 16.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "TIM 3V-IE DNP3 (incl. SIPLUS NET variants) versions ant\u00e9rieures \u00e0 V3.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2020 R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Nucleus Source Code versions contenant le module DNS affect\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "TIM 4R-IE DNP3 (incl. SIPLUS NET variants) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMOTICS CONNECT 400 toutes verions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-27009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27009"
    },
    {
      "name": "CVE-2015-7855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7855"
    },
    {
      "name": "CVE-2019-18339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18339"
    },
    {
      "name": "CVE-2016-1547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1547"
    },
    {
      "name": "CVE-2015-7973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7973"
    },
    {
      "name": "CVE-2016-4953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4953"
    },
    {
      "name": "CVE-2021-27389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27389"
    },
    {
      "name": "CVE-2021-27382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27382"
    },
    {
      "name": "CVE-2020-27736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27736"
    },
    {
      "name": "CVE-2021-27380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27380"
    },
    {
      "name": "CVE-2015-5219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5219"
    },
    {
      "name": "CVE-2016-1550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1550"
    },
    {
      "name": "CVE-2015-7977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7977"
    },
    {
      "name": "CVE-2015-7705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7705"
    },
    {
      "name": "CVE-2021-27392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27392"
    },
    {
      "name": "CVE-2019-19956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
    },
    {
      "name": "CVE-2021-25663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25663"
    },
    {
      "name": "CVE-2020-15795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15795"
    },
    {
      "name": "CVE-2015-8138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8138"
    },
    {
      "name": "CVE-2016-4954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4954"
    },
    {
      "name": "CVE-2021-25664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25664"
    },
    {
      "name": "CVE-2020-25243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25243"
    },
    {
      "name": "CVE-2015-7974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7974"
    },
    {
      "name": "CVE-2015-8214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8214"
    },
    {
      "name": "CVE-2019-19299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19299"
    },
    {
      "name": "CVE-2020-28385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-28385"
    },
    {
      "name": "CVE-2021-25678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25678"
    },
    {
      "name": "CVE-2020-7595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
    },
    {
      "name": "CVE-2021-27393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27393"
    },
    {
      "name": "CVE-2020-25244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25244"
    },
    {
      "name": "CVE-2019-18340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18340"
    },
    {
      "name": "CVE-2021-25670",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25670"
    },
    {
      "name": "CVE-2015-7979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7979"
    },
    {
      "name": "CVE-2015-7871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7871"
    },
    {
      "name": "CVE-2020-27738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27738"
    },
    {
      "name": "CVE-2019-19298",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19298"
    },
    {
      "name": "CVE-2020-26997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26997"
    },
    {
      "name": "CVE-2019-19291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19291"
    },
    {
      "name": "CVE-2020-27737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27737"
    },
    {
      "name": "CVE-2019-19297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19297"
    },
    {
      "name": "CVE-2016-1548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1548"
    },
    {
      "name": "CVE-2021-25677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25677"
    },
    {
      "name": "CVE-2019-19296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19296"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-255",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-04-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service et un\ncontournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-788287 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-788287.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-248289 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-853866 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-853866.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-185699 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-983300 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-983300.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-844761 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-163226 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-163226.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-763427 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-763427.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-497656 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-761617 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-669158 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-669158.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-574442 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-705111 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-292794 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-761844 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Cisco Standalone rack server CIMC",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "NTP versions ant\u00e9rieures \u00e0 ntp-4.2.8p4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco DCM Series 9900-Digital Content Manager",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco TelePresence MX Series",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco TelePresence SX Series",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Telepresence Integrator C Series",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco TelePresence EX Series",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco TelePresence Profile Series",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-7855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7855"
    },
    {
      "name": "CVE-2015-7850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7850"
    },
    {
      "name": "CVE-2015-7702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7702"
    },
    {
      "name": "CVE-2015-7705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7705"
    },
    {
      "name": "CVE-2015-7853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7853"
    },
    {
      "name": "CVE-2015-7854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7854"
    },
    {
      "name": "CVE-2015-7849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7849"
    },
    {
      "name": "CVE-2015-7851",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7851"
    },
    {
      "name": "CVE-2015-7691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7691"
    },
    {
      "name": "CVE-2015-7852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7852"
    },
    {
      "name": "CVE-2015-7701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7701"
    },
    {
      "name": "CVE-2015-7871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7871"
    },
    {
      "name": "CVE-2015-7692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7692"
    },
    {
      "name": "CVE-2015-7848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7848"
    },
    {
      "name": "CVE-2015-7704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7704"
    },
    {
      "name": "CVE-2015-7703",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7703"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20151021-ntp du 21    octobre 2015",
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp"
    }
  ],
  "reference": "CERTFR-2015-AVI-449",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-10-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eNTP\u003c/span\u003e. Elles permettent \u00e0 un attaquant de provoquer\nun d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans NTP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NTP du 21 octobre 2015",
      "url": "http://support.ntp.org/bin/view/Main/SecurityNotice"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20151021-ntp du 21 octobre 2015",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Cisco Standalone rack server CIMC",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "NTP versions ant\u00e9rieures \u00e0 ntp-4.2.8p4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco DCM Series 9900-Digital Content Manager",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco TelePresence MX Series",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco TelePresence SX Series",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Telepresence Integrator C Series",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco TelePresence EX Series",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco TelePresence Profile Series",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-7855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7855"
    },
    {
      "name": "CVE-2015-7850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7850"
    },
    {
      "name": "CVE-2015-7702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7702"
    },
    {
      "name": "CVE-2015-7705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7705"
    },
    {
      "name": "CVE-2015-7853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7853"
    },
    {
      "name": "CVE-2015-7854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7854"
    },
    {
      "name": "CVE-2015-7849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7849"
    },
    {
      "name": "CVE-2015-7851",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7851"
    },
    {
      "name": "CVE-2015-7691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7691"
    },
    {
      "name": "CVE-2015-7852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7852"
    },
    {
      "name": "CVE-2015-7701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7701"
    },
    {
      "name": "CVE-2015-7871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7871"
    },
    {
      "name": "CVE-2015-7692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7692"
    },
    {
      "name": "CVE-2015-7848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7848"
    },
    {
      "name": "CVE-2015-7704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7704"
    },
    {
      "name": "CVE-2015-7703",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7703"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20151021-ntp du 21    octobre 2015",
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp"
    }
  ],
  "reference": "CERTFR-2015-AVI-449",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-10-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eNTP\u003c/span\u003e. Elles permettent \u00e0 un attaquant de provoquer\nun d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans NTP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 NTP du 21 octobre 2015",
      "url": "http://support.ntp.org/bin/view/Main/SecurityNotice"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20151021-ntp du 21 octobre 2015",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "LOGO! Soft Comfort toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2019 R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Solid Edge SE2021 versions ant\u00e9rieures \u00e0 SE2021MP4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 443-1 Advanced (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.2.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2019 R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Nucleus NET versions ant\u00e9rieures \u00e0 5.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "TIM 3V-IE / TIM 3V-IE Advanced (incl. SIPLUSNET variants) versions ant\u00e9rieures \u00e0 V2.6.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SiNVR/SiVMS Video Server toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Nucleus RTOS versions contenant le module DNS affect\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 343-1 Advanced (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.0.44",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Solid Edge SE2020 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 343-1 Lean (incl. SIPLUS vari-ants) versions ant\u00e9rieures \u00e0 V3.1.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 443-5 Basic (incl. SIPLUS vari-ants) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Opcenter Quality versions ant\u00e9rieures \u00e0 12.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2019 R1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 443-5 Extended toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "VSTAR versions contenant le module DNS affect\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Control Center Server (CCS) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "TIM 4R-IE (incl. SIPLUS NET variants) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2020 R1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SINEMA Remote Connect Server versions ant\u00e9rieures \u00e0 3.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2020 R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 343-1 Standard (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.1.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 443-1 Standard (incl. SIPLUSvariants) versions ant\u00e9rieures \u00e0 V3.2.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC NET CP 342-5 (incl. SIPLUS variants) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2018 R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Nucleus ReadyStart toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Nucleus 4 versions ant\u00e9rieures \u00e0 4.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2018 R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "QMS Automotive versions ant\u00e9rieures \u00e0 12.30",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Tecnomatix RobotExpert versions ant\u00e9rieures \u00e0 16.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "TIM 3V-IE DNP3 (incl. SIPLUS NET variants) versions ant\u00e9rieures \u00e0 V3.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Siveillance Video Open Network Bridge:2020 R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Nucleus Source Code versions contenant le module DNS affect\u00e9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "TIM 4R-IE DNP3 (incl. SIPLUS NET variants) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMOTICS CONNECT 400 toutes verions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-27009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27009"
    },
    {
      "name": "CVE-2015-7855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7855"
    },
    {
      "name": "CVE-2019-18339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18339"
    },
    {
      "name": "CVE-2016-1547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1547"
    },
    {
      "name": "CVE-2015-7973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7973"
    },
    {
      "name": "CVE-2016-4953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4953"
    },
    {
      "name": "CVE-2021-27389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27389"
    },
    {
      "name": "CVE-2021-27382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27382"
    },
    {
      "name": "CVE-2020-27736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27736"
    },
    {
      "name": "CVE-2021-27380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27380"
    },
    {
      "name": "CVE-2015-5219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-5219"
    },
    {
      "name": "CVE-2016-1550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1550"
    },
    {
      "name": "CVE-2015-7977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7977"
    },
    {
      "name": "CVE-2015-7705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7705"
    },
    {
      "name": "CVE-2021-27392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27392"
    },
    {
      "name": "CVE-2019-19956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19956"
    },
    {
      "name": "CVE-2021-25663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25663"
    },
    {
      "name": "CVE-2020-15795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15795"
    },
    {
      "name": "CVE-2015-8138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8138"
    },
    {
      "name": "CVE-2016-4954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4954"
    },
    {
      "name": "CVE-2021-25664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25664"
    },
    {
      "name": "CVE-2020-25243",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25243"
    },
    {
      "name": "CVE-2015-7974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7974"
    },
    {
      "name": "CVE-2015-8214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-8214"
    },
    {
      "name": "CVE-2019-19299",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19299"
    },
    {
      "name": "CVE-2020-28385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-28385"
    },
    {
      "name": "CVE-2021-25678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25678"
    },
    {
      "name": "CVE-2020-7595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-7595"
    },
    {
      "name": "CVE-2021-27393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27393"
    },
    {
      "name": "CVE-2020-25244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-25244"
    },
    {
      "name": "CVE-2019-18340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18340"
    },
    {
      "name": "CVE-2021-25670",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25670"
    },
    {
      "name": "CVE-2015-7979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7979"
    },
    {
      "name": "CVE-2015-7871",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7871"
    },
    {
      "name": "CVE-2020-27738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27738"
    },
    {
      "name": "CVE-2019-19298",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19298"
    },
    {
      "name": "CVE-2020-26997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26997"
    },
    {
      "name": "CVE-2019-19291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19291"
    },
    {
      "name": "CVE-2020-27737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27737"
    },
    {
      "name": "CVE-2019-19297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19297"
    },
    {
      "name": "CVE-2016-1548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1548"
    },
    {
      "name": "CVE-2021-25677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25677"
    },
    {
      "name": "CVE-2019-19296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19296"
    }
  ],
  "links": [],
  "reference": "CERTFR-2021-AVI-255",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-04-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service et un\ncontournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-788287 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-788287.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-248289 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-853866 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-853866.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-185699 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-185699.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-983300 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-983300.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-844761 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-163226 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-163226.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-763427 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-763427.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-497656 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-761617 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-669158 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-669158.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-574442 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-705111 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-292794 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-761844 du 13 avril 2021",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2015-7871"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-287"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-08-07T20:29:00Z",
    "severity": "CRITICAL"
  },
  "details": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
  "id": "GHSA-mxc3-mjx4-gjc9",
  "modified": "2025-04-20T03:42:20Z",
  "published": "2022-05-13T01:10:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7871"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1274265"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf"
    },
    {
      "type": "WEB",
      "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201604-03"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201607-15"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20171004-0001"
    },
    {
      "type": "WEB",
      "url": "http://support.ntp.org/bin/view/Main/NtpBug2941"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2015/dsa-3388"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/77287"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1033951"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Locate control system networks and remote devices behind firewalls and isolating them from business networks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs). Recognize VPNs may have vulnerabilities, should be updated to the most recent version available, and are only as secure as the connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also recommends users take the following measures to protect themselves from social engineering attacks: Do not click web links or open attachments in unsolicited email messages. Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams. Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-15-356-01 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2015/icsa-15-356-01.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-15-356-01 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-15-356-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
      }
    ],
    "title": "Siemens RUGGEDCOM ROX-based Devices NTP Vulnerabilities",
    "tracking": {
      "current_release_date": "2025-06-09T16:30:45.504574Z",
      "generator": {
        "date": "2025-06-09T16:30:45.504453Z",
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-15-356-01",
      "initial_release_date": "2015-09-24T06:00:00.000000Z",
      "revision_history": [
        {
          "date": "2015-09-24T06:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "Initial Publication"
        },
        {
          "date": "2025-06-09T16:30:45.504574Z",
          "legacy_version": "CSAF Conversion",
          "number": "2",
          "summary": "Advisory converted into a CSAF"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Siemens RUGGEDCOM ROX I: vers:all/*",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM ROX I"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.9.0",
                "product": {
                  "name": "Siemens ROX II: \u003c2.9.0",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "ROX II"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-7871",
      "cwe": {
        "id": "CWE-592",
        "name": "DEPRECATED: Authentication Bypass Issues"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to the latest version. (http://www.siemens.com/automation/support-request)",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002"
          ],
          "url": "http://www.siemens.com/automation/support-request"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2015-7855",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to the latest version. (http://www.siemens.com/automation/support-request)",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002"
          ],
          "url": "http://www.siemens.com/automation/support-request"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.2,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2015-7704",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted \"KOD\" messages.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to the latest version. (http://www.siemens.com/automation/support-request)",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002"
          ],
          "url": "http://www.siemens.com/automation/support-request"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2015-5300",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to the latest version. (http://www.siemens.com/automation/support-request)",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002"
          ],
          "url": "http://www.siemens.com/automation/support-request"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Siemens ProductCERT",
        "summary": "reporting these vulnerabilities to CISA."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "TIM 4R-IE devices contain multiple vulnerabilities in the integrated NTP component as listed below.\n\nSiemens recommends specific countermeasures for products where fixes are not, or not yet available.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "other",
        "text": "This ICSA is a verbatim republication of Siemens ProductCERT SSA-497656 from a direct conversion of their vendor\u0027s Common Security Advisory Framework (CSAF) advisory. This is republished to CISA\u0027s website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory.  Further, CISA does not endorse any commercial product or service.  Please contact Siemens ProductCERT directly for any questions regarding this advisory.",
        "title": "Advisory Conversion Disclaimer"
      },
      {
        "category": "other",
        "text": "Critical Manufacturing",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-497656: Multiple NTP Vulnerabilities in TIM 4R-IE Devices - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-497656.json"
      },
      {
        "category": "self",
        "summary": "SSA-497656: Multiple NTP Vulnerabilities in TIM 4R-IE Devices - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-497656.html"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-21-103-11 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-103-11.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-21-103-11 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-103-11"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Siemens TIM 4R-IE Devices",
    "tracking": {
      "current_release_date": "2025-06-10T00:00:00.000000Z",
      "generator": {
        "date": "2025-06-12T16:06:28.183821Z",
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-21-103-11",
      "initial_release_date": "2021-04-13T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2021-04-13T00:00:00.000000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2025-06-10T00:00:00.000000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Expanded affected TIM 4R-IE product families to individual products, incl. MLFB IDs; CVE-2015-5219: changed CWE from CWE-704 to CWE-681; CVE-2015-7973: changed CWE from CWE-254 to CWE-294; CVE-2015-7979: changed CWE from CWE-19 to CWE-821; CVE-2016-1547: changed CWE from CWE-20 to CWE-821; CVE-2016-1548: changed CWE from CWE-19 to CWE-290"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)",
                  "product_id": "CSAFPID-0001",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1800-4BA00-7AA0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)",
                  "product_id": "CSAFPID-0002",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1803-4BA00-7AA0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "TIM 4R-IE (6NH7800-4BA00)",
                  "product_id": "CSAFPID-0003",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6NH7800-4BA00"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "TIM 4R-IE (6NH7800-4BA00)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "TIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)",
                  "product_id": "CSAFPID-0004",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6NH7803-4BA00-0AA0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "TIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-5219",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2015-5219"
    },
    {
      "cve": "CVE-2015-7705",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2015-7705"
    },
    {
      "cve": "CVE-2015-7855",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2015-7855"
    },
    {
      "cve": "CVE-2015-7871",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2015-7871"
    },
    {
      "cve": "CVE-2015-7973",
      "cwe": {
        "id": "CWE-294",
        "name": "Authentication Bypass by Capture-replay"
      },
      "notes": [
        {
          "category": "summary",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2015-7973"
    },
    {
      "cve": "CVE-2015-7974",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2015-7974"
    },
    {
      "cve": "CVE-2015-7977",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2015-7977"
    },
    {
      "cve": "CVE-2015-7979",
      "cwe": {
        "id": "CWE-821",
        "name": "Incorrect Synchronization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2015-7979"
    },
    {
      "cve": "CVE-2015-8138",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2015-8138"
    },
    {
      "cve": "CVE-2016-1547",
      "cwe": {
        "id": "CWE-821",
        "name": "Incorrect Synchronization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2016-1547"
    },
    {
      "cve": "CVE-2016-1548",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-\u003edst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2016-1548"
    },
    {
      "cve": "CVE-2016-1550",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2016-1550"
    },
    {
      "cve": "CVE-2016-4953",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2016-4953"
    },
    {
      "cve": "CVE-2016-4954",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ],
      "title": "CVE-2016-4954"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for ntp",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "ntp was updated to version 4.2.8p6 to fix 28 security issues.\n\nMajor functional changes:\n- The \u0027sntp\u0027 commandline tool changed its option handling in a major way,\n  some options have been renamed or dropped.\n- \u0027controlkey 1\u0027 is added during update to ntp.conf to allow sntp to work.\n- The local clock is being disabled during update.\n- ntpd is no longer running chrooted.\n\nOther functional changes:\n- ntp-signd is installed.\n- \u0027enable mode7\u0027 can be added to the configuration to allow ntdpc to work as compatibility mode option.\n- \u0027kod\u0027 was removed from the default restrictions.\n- SHA1 keys are used by default instead of MD5 keys.\n\nAlso yast2-ntp-client was updated to match some sntp syntax changes. (bsc#937837)\n\nThese security issues were fixed:\n- CVE-2015-8158: Fixed potential infinite loop in ntpq (bsc#962966).\n- CVE-2015-8138: Zero Origin Timestamp Bypass (bsc#963002).\n- CVE-2015-7979: Off-path Denial of Service (DoS) attack on authenticated broadcast mode (bsc#962784).\n- CVE-2015-7978: Stack exhaustion in recursive traversal of restriction list (bsc#963000).\n- CVE-2015-7977: reslist NULL pointer dereference (bsc#962970).\n- CVE-2015-7976: ntpq saveconfig command allows dangerous characters in filenames (bsc#962802).\n- CVE-2015-7975: nextvar() missing length check (bsc#962988).\n- CVE-2015-7974: Skeleton Key: Missing key check allows impersonation between authenticated peers (bsc#962960).\n- CVE-2015-7973: Replay attack on authenticated broadcast mode (bsc#962995).\n- CVE-2015-8140: ntpq vulnerable to replay attacks (bsc#962994).\n- CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin (bsc#962997).\n- CVE-2015-5300: MITM attacker could have forced ntpd to make a step larger than the panic threshold (bsc#951629).\n- CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK (bsc#951608).\n- CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values (bsc#951608).\n- CVE-2015-7854: Password Length Memory Corruption Vulnerability (bsc#951608).\n- CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow (bsc#951608).\n- CVE-2015-7852: ntpq atoascii() Memory Corruption Vulnerability (bsc#951608).\n- CVE-2015-7851: saveconfig Directory Traversal Vulnerability (bsc#951608).\n- CVE-2015-7850: remote config logfile-keyfile (bsc#951608).\n- CVE-2015-7849: trusted key use-after-free (bsc#951608).\n- CVE-2015-7848: mode 7 loop counter underrun (bsc#951608).\n- CVE-2015-7701: Slow memory leak in CRYPTO_ASSOC (bsc#951608).\n- CVE-2015-7703: configuration directives \u0027pidfile\u0027 and \u0027driftfile\u0027 should only be allowed locally (bsc#951608).\n- CVE-2015-7704, CVE-2015-7705: Clients that receive a KoD should validate the origin timestamp field (bsc#951608).\n- CVE-2015-7691, CVE-2015-7692, CVE-2015-7702: Incomplete autokey data packet length checks (bsc#951608).\n\nThese non-security issues were fixed:\n- fate#320758 bsc#975981: Enable compile-time support for MS-SNTP (--enable-ntp-signd).\n  This replaces the w32 patches in 4.2.4 that added the authreg\n  directive.\n- bsc#962318: Call /usr/sbin/sntp with full path to synchronize in start-ntpd.\n  When run as cron job, /usr/sbin/ is not in the path, which caused\n  the synchronization to fail.\n- bsc#782060: Speedup ntpq.\n- bsc#916617: Add /var/db/ntp-kod.\n- bsc#956773: Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems.\n- bsc#951559,bsc#975496: Fix the TZ offset output of sntp during DST.\n- Add ntp-fork.patch and build with threads disabled to allow name resolution even when running chrooted.\n- Add a controlkey line to /etc/ntp.conf if one does not already exist to allow runtime configuuration via ntpq.\n- bsc#946386: Temporarily disable memlock to avoid problems due to high memory usage during name resolution.\n- bsc#905885: Use SHA1 instead of MD5 for symmetric keys.\n- Improve runtime configuration:\n  * Read keytype from ntp.conf\n  * Don\u0027t write ntp keys to syslog.\n- Fix legacy action scripts to pass on command line arguments.\n- bsc#944300: Remove \u0027kod\u0027 from the restrict line in ntp.conf.\n- bsc#936327: Use ntpq instead of deprecated ntpdc in start-ntpd.\n- Add a controlkey to ntp.conf to make the above work.\n- Don\u0027t let \u0027keysdir\u0027 lines in ntp.conf trigger the \u0027keys\u0027 parser.\n- Disable mode 7 (ntpdc) again, now that we don\u0027t use it anymore.\n- Add \u0027addserver\u0027 as a new legacy action.\n- bsc#910063: Fix the comment regarding addserver in ntp.conf.\n- bsc#926510: Disable chroot by default.\n- bsc#920238: Enable ntpdc for backwards compatibility.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-2016-727,SUSE-SLE-SDK-12-2016-727,SUSE-SLE-SERVER-12-2016-727",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1247-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:1247-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161247-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:1247-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-May/002043.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 782060",
        "url": "https://bugzilla.suse.com/782060"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 905885",
        "url": "https://bugzilla.suse.com/905885"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 910063",
        "url": "https://bugzilla.suse.com/910063"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 916617",
        "url": "https://bugzilla.suse.com/916617"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 920238",
        "url": "https://bugzilla.suse.com/920238"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 926510",
        "url": "https://bugzilla.suse.com/926510"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 936327",
        "url": "https://bugzilla.suse.com/936327"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 937837",
        "url": "https://bugzilla.suse.com/937837"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 942587",
        "url": "https://bugzilla.suse.com/942587"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 944300",
        "url": "https://bugzilla.suse.com/944300"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 946386",
        "url": "https://bugzilla.suse.com/946386"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 951559",
        "url": "https://bugzilla.suse.com/951559"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 951608",
        "url": "https://bugzilla.suse.com/951608"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 951629",
        "url": "https://bugzilla.suse.com/951629"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 954982",
        "url": "https://bugzilla.suse.com/954982"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 956773",
        "url": "https://bugzilla.suse.com/956773"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962318",
        "url": "https://bugzilla.suse.com/962318"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962784",
        "url": "https://bugzilla.suse.com/962784"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962802",
        "url": "https://bugzilla.suse.com/962802"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962960",
        "url": "https://bugzilla.suse.com/962960"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962966",
        "url": "https://bugzilla.suse.com/962966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962970",
        "url": "https://bugzilla.suse.com/962970"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962988",
        "url": "https://bugzilla.suse.com/962988"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962994",
        "url": "https://bugzilla.suse.com/962994"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962995",
        "url": "https://bugzilla.suse.com/962995"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962997",
        "url": "https://bugzilla.suse.com/962997"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 963000",
        "url": "https://bugzilla.suse.com/963000"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 963002",
        "url": "https://bugzilla.suse.com/963002"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 975496",
        "url": "https://bugzilla.suse.com/975496"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 975981",
        "url": "https://bugzilla.suse.com/975981"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5300 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5300/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7691 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7691/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7692 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7692/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7701 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7701/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7702 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7702/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7703 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7703/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7704 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7704/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7705 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7848 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7848/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7849 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7849/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7850 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7850/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7851 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7851/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7852 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7852/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7853 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7854 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7854/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7855 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7855/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7871 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7871/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7973 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7973/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7974 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7974/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7975 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7975/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7976 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7976/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7977 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7977/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7978 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7978/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7979 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7979/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8138 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8138/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8139 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8139/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8140 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8140/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8158 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8158/"
      }
    ],
    "title": "Security update for ntp",
    "tracking": {
      "current_release_date": "2016-05-06T07:50:51Z",
      "generator": {
        "date": "2016-05-06T07:50:51Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:1247-1",
      "initial_release_date": "2016-05-06T07:50:51Z",
      "revision_history": [
        {
          "date": "2016-05-06T07:50:51Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "yast2-ntp-client-3.1.12.4-8.2.noarch",
                "product": {
                  "name": "yast2-ntp-client-3.1.12.4-8.2.noarch",
                  "product_id": "yast2-ntp-client-3.1.12.4-8.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
                "product": {
                  "name": "yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
                  "product_id": "yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p6-46.5.2.ppc64le",
                "product": {
                  "name": "ntp-4.2.8p6-46.5.2.ppc64le",
                  "product_id": "ntp-4.2.8p6-46.5.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p6-46.5.2.ppc64le",
                "product": {
                  "name": "ntp-doc-4.2.8p6-46.5.2.ppc64le",
                  "product_id": "ntp-doc-4.2.8p6-46.5.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p6-46.5.2.s390x",
                "product": {
                  "name": "ntp-4.2.8p6-46.5.2.s390x",
                  "product_id": "ntp-4.2.8p6-46.5.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p6-46.5.2.s390x",
                "product": {
                  "name": "ntp-doc-4.2.8p6-46.5.2.s390x",
                  "product_id": "ntp-doc-4.2.8p6-46.5.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p6-46.5.2.x86_64",
                "product": {
                  "name": "ntp-4.2.8p6-46.5.2.x86_64",
                  "product_id": "ntp-4.2.8p6-46.5.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p6-46.5.2.x86_64",
                "product": {
                  "name": "ntp-doc-4.2.8p6-46.5.2.x86_64",
                  "product_id": "ntp-doc-4.2.8p6-46.5.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12",
                  "product_id": "SUSE Linux Enterprise Desktop 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12",
                  "product_id": "SUSE Linux Enterprise Server 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64"
        },
        "product_reference": "ntp-4.2.8p6-46.5.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p6-46.5.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "yast2-ntp-client-3.1.12.4-8.2.noarch as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch"
        },
        "product_reference": "yast2-ntp-client-3.1.12.4-8.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch as component of SUSE Linux Enterprise Software Development Kit 12",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        },
        "product_reference": "yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-46.5.2.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le"
        },
        "product_reference": "ntp-4.2.8p6-46.5.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-46.5.2.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x"
        },
        "product_reference": "ntp-4.2.8p6-46.5.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64"
        },
        "product_reference": "ntp-4.2.8p6-46.5.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-46.5.2.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le"
        },
        "product_reference": "ntp-doc-4.2.8p6-46.5.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-46.5.2.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p6-46.5.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p6-46.5.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "yast2-ntp-client-3.1.12.4-8.2.noarch as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch"
        },
        "product_reference": "yast2-ntp-client-3.1.12.4-8.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-46.5.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le"
        },
        "product_reference": "ntp-4.2.8p6-46.5.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-46.5.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x"
        },
        "product_reference": "ntp-4.2.8p6-46.5.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64"
        },
        "product_reference": "ntp-4.2.8p6-46.5.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-46.5.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le"
        },
        "product_reference": "ntp-doc-4.2.8p6-46.5.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-46.5.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p6-46.5.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-46.5.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p6-46.5.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "yast2-ntp-client-3.1.12.4-8.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch"
        },
        "product_reference": "yast2-ntp-client-3.1.12.4-8.2.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-5300",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5300"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5300",
          "url": "https://www.suse.com/security/cve/CVE-2015-5300"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951629 for CVE-2015-5300",
          "url": "https://bugzilla.suse.com/951629"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-5300",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962624 for CVE-2015-5300",
          "url": "https://bugzilla.suse.com/962624"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5300"
    },
    {
      "cve": "CVE-2015-7691",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7691"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7691",
          "url": "https://www.suse.com/security/cve/CVE-2015-7691"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7691"
    },
    {
      "cve": "CVE-2015-7692",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7692"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7692",
          "url": "https://www.suse.com/security/cve/CVE-2015-7692"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7692"
    },
    {
      "cve": "CVE-2015-7701",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7701"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7701",
          "url": "https://www.suse.com/security/cve/CVE-2015-7701"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7701"
    },
    {
      "cve": "CVE-2015-7702",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7702"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7702",
          "url": "https://www.suse.com/security/cve/CVE-2015-7702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7702"
    },
    {
      "cve": "CVE-2015-7703",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7703"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The \"pidfile\" or \"driftfile\" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7703",
          "url": "https://www.suse.com/security/cve/CVE-2015-7703"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943216 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943218 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943218"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943219 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943221 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943221"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7703"
    },
    {
      "cve": "CVE-2015-7704",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7704"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted \"KOD\" messages.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7704",
          "url": "https://www.suse.com/security/cve/CVE-2015-7704"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952611 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/952611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/977446"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7704"
    },
    {
      "cve": "CVE-2015-7705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7705",
          "url": "https://www.suse.com/security/cve/CVE-2015-7705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952611 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/952611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7705"
    },
    {
      "cve": "CVE-2015-7848",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7848"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7848",
          "url": "https://www.suse.com/security/cve/CVE-2015-7848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7848"
    },
    {
      "cve": "CVE-2015-7849",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7849"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7849",
          "url": "https://www.suse.com/security/cve/CVE-2015-7849"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7849"
    },
    {
      "cve": "CVE-2015-7850",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7850"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7850",
          "url": "https://www.suse.com/security/cve/CVE-2015-7850"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7850"
    },
    {
      "cve": "CVE-2015-7851",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7851"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use \u0027\\\u0027 or \u0027/\u0027 characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7851",
          "url": "https://www.suse.com/security/cve/CVE-2015-7851"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7851"
    },
    {
      "cve": "CVE-2015-7852",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7852"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7852",
          "url": "https://www.suse.com/security/cve/CVE-2015-7852"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7852"
    },
    {
      "cve": "CVE-2015-7853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7853",
          "url": "https://www.suse.com/security/cve/CVE-2015-7853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7853"
    },
    {
      "cve": "CVE-2015-7854",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7854"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7854",
          "url": "https://www.suse.com/security/cve/CVE-2015-7854"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7854"
    },
    {
      "cve": "CVE-2015-7855",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7855"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7855",
          "url": "https://www.suse.com/security/cve/CVE-2015-7855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7855"
    },
    {
      "cve": "CVE-2015-7871",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7871"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7871",
          "url": "https://www.suse.com/security/cve/CVE-2015-7871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952606 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/952606"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7871"
    },
    {
      "cve": "CVE-2015-7973",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7973"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7973",
          "url": "https://www.suse.com/security/cve/CVE-2015-7973"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7973",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7973",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7973"
    },
    {
      "cve": "CVE-2015-7974",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7974"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7974",
          "url": "https://www.suse.com/security/cve/CVE-2015-7974"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7974",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962960 for CVE-2015-7974",
          "url": "https://bugzilla.suse.com/962960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7974",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-7974"
    },
    {
      "cve": "CVE-2015-7975",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7975"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7975",
          "url": "https://www.suse.com/security/cve/CVE-2015-7975"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7975",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962988 for CVE-2015-7975",
          "url": "https://bugzilla.suse.com/962988"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7975",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-7975"
    },
    {
      "cve": "CVE-2015-7976",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7976"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7976",
          "url": "https://www.suse.com/security/cve/CVE-2015-7976"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962802 for CVE-2015-7976",
          "url": "https://bugzilla.suse.com/962802"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7976",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-7976"
    },
    {
      "cve": "CVE-2015-7977",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7977"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7977",
          "url": "https://www.suse.com/security/cve/CVE-2015-7977"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7977",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962970 for CVE-2015-7977",
          "url": "https://bugzilla.suse.com/962970"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7977",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7977"
    },
    {
      "cve": "CVE-2015-7978",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7978"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7978",
          "url": "https://www.suse.com/security/cve/CVE-2015-7978"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962970 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/962970"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/962995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963000 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/963000"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7978"
    },
    {
      "cve": "CVE-2015-7979",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7979"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7979",
          "url": "https://www.suse.com/security/cve/CVE-2015-7979"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962784 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/962784"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/962995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977459 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/977459"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982065 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/982065"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7979"
    },
    {
      "cve": "CVE-2015-8138",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8138"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8138",
          "url": "https://www.suse.com/security/cve/CVE-2015-8138"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963002 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/963002"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974668 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/974668"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/977446"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8138"
    },
    {
      "cve": "CVE-2015-8139",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8139"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8139",
          "url": "https://www.suse.com/security/cve/CVE-2015-8139"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-8139",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8139",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962997 for CVE-2015-8139",
          "url": "https://bugzilla.suse.com/962997"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8139"
    },
    {
      "cve": "CVE-2015-8140",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8140"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8140",
          "url": "https://www.suse.com/security/cve/CVE-2015-8140"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-8140",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8140",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962994 for CVE-2015-8140",
          "url": "https://bugzilla.suse.com/962994"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8140"
    },
    {
      "cve": "CVE-2015-8158",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8158"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
          "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8158",
          "url": "https://www.suse.com/security/cve/CVE-2015-8158"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8158",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962966 for CVE-2015-8158",
          "url": "https://bugzilla.suse.com/962966"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Desktop 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p6-46.5.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:yast2-ntp-client-3.1.12.4-8.2.noarch",
            "SUSE Linux Enterprise Software Development Kit 12:yast2-ntp-client-devel-doc-3.1.12.4-8.2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-06T07:50:51Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-8158"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for ntp",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis network time protocol server ntp was updated to 4.2.8p6 to fix the following\nissues:\n\nAlso yast2-ntp-client was updated to match some sntp syntax changes. (bsc#937837)\n\nMajor functional changes:\n- The \u0027sntp\u0027 commandline tool changed its option handling in a major way.\n- \u0027controlkey 1\u0027 is added during update to ntp.conf to allow sntp to work.\n- The local clock is being disabled during update.\n- ntpd is no longer running chrooted.\n\n\nOther functional changes:\n- ntp-signd is installed.\n- \u0027enable mode7\u0027 can be added to the configuration to allow ntdpc to work as compatibility mode option.\n- \u0027kod\u0027 was removed from the default restrictions.\n- SHA1 keys are used by default instead of MD5 keys.\n\nThese security issues were fixed:\n- CVE-2015-5219: An endless loop due to incorrect precision to double conversion (bsc#943216).\n- CVE-2015-8158: Fixed potential infinite loop in ntpq (bsc#962966).\n- CVE-2015-8138: Zero Origin Timestamp Bypass (bsc#963002).\n- CVE-2015-7979: Off-path Denial of Service (DoS) attack on authenticated broadcast mode (bsc#962784).\n- CVE-2015-7978: Stack exhaustion in recursive traversal of restriction list (bsc#963000).\n- CVE-2015-7977: reslist NULL pointer dereference (bsc#962970).\n- CVE-2015-7976: ntpq saveconfig command allows dangerous characters in filenames (bsc#962802).\n- CVE-2015-7975: nextvar() missing length check (bsc#962988).\n- CVE-2015-7974: Skeleton Key: Missing key check allows impersonation between authenticated peers (bsc#962960).\n- CVE-2015-7973: Replay attack on authenticated broadcast mode (bsc#962995).\n- CVE-2015-8140: ntpq vulnerable to replay attacks (bsc#962994).\n- CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin (bsc#962997).\n- CVE-2015-5300: MITM attacker could have forced ntpd to make a step larger than the panic threshold (bsc#951629).\n- CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK (bsc#951608).\n- CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values (bsc#951608).\n- CVE-2015-7854: Password Length Memory Corruption Vulnerability (bsc#951608).\n- CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow (bsc#951608).\n- CVE-2015-7852: ntpq atoascii() Memory Corruption Vulnerability (bsc#951608).\n- CVE-2015-7851: saveconfig Directory Traversal Vulnerability (bsc#951608).\n- CVE-2015-7850: remote config logfile-keyfile (bsc#951608).\n- CVE-2015-7849: trusted key use-after-free (bsc#951608).\n- CVE-2015-7848: mode 7 loop counter underrun (bsc#951608).\n- CVE-2015-7701: Slow memory leak in CRYPTO_ASSOC (bsc#951608).\n- CVE-2015-7703: configuration directives \u0027pidfile\u0027 and \u0027driftfile\u0027 should only be allowed locally (bsc#951608).\n- CVE-2015-7704, CVE-2015-7705: Clients that receive a KoD should validate the origin timestamp field (bsc#951608).\n- CVE-2015-7691, CVE-2015-7692, CVE-2015-7702: Incomplete autokey data packet length checks (bsc#951608).\n\nThese non-security issues were fixed:\n- fate#320758 bsc#975981: Enable compile-time support for MS-SNTP (--enable-ntp-signd).\n  This replaces the w32 patches in 4.2.4 that added the authreg\n  directive.\n- bsc#962318: Call /usr/sbin/sntp with full path to synchronize in start-ntpd.\n  When run as cron job, /usr/sbin/ is not in the path, which caused\n  the synchronization to fail.\n- bsc#782060: Speedup ntpq.\n- bsc#916617: Add /var/db/ntp-kod.\n- bsc#956773: Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems.\n- bsc#951559,bsc#975496: Fix the TZ offset output of sntp during DST.\n- Add ntp-fork.patch and build with threads disabled to allow name resolution even when running chrooted.\n- Add a controlkey line to /etc/ntp.conf if one does not already exist to allow runtime configuuration via ntpq.\n- bsc#946386: Temporarily disable memlock to avoid problems due to high memory usage during name resolution.\n- bsc#905885: Use SHA1 instead of MD5 for symmetric keys.\n- Improve runtime configuration:\n  * Read keytype from ntp.conf\n  * Don\u0027t write ntp keys to syslog.\n- Fix legacy action scripts to pass on command line arguments.\n- bsc#944300: Remove \u0027kod\u0027 from the restrict line in ntp.conf.\n- bsc#936327: Use ntpq instead of deprecated ntpdc in start-ntpd.\n- Don\u0027t let \u0027keysdir\u0027 lines in ntp.conf trigger the \u0027keys\u0027 parser.\n- Disable mode 7 (ntpdc) again, now that we don\u0027t use it anymore.\n- Add \u0027addserver\u0027 as a new legacy action.\n- bsc#910063: Fix the comment regarding addserver in ntp.conf.\n- bsc#926510: Disable chroot by default.\n- bsc#920238: Enable ntpdc for backwards compatibility.\n- bsc#784760: Remove local clock from default configuration.\n- bsc#942441/fate#319496: Require perl-Socket6.\n- Improve runtime configuration:\n  * Read keytype from ntp.conf\n  * Don\u0027t write ntp keys to syslog.\n- bsc#920183: Allow -4 and -6 address qualifiers in \u0027server\u0027 directives.\n- Use upstream ntp-wait, because our version is incompatible with\n  the new ntpq command line syntax.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sleclo50sp3-ntp-12561,sleman21-ntp-12561,slemap21-ntp-12561,slessp2-ntp-12561,slessp3-ntp-12561",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1311-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:1311-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:1311-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-May/002064.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 782060",
        "url": "https://bugzilla.suse.com/782060"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 784760",
        "url": "https://bugzilla.suse.com/784760"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 905885",
        "url": "https://bugzilla.suse.com/905885"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 910063",
        "url": "https://bugzilla.suse.com/910063"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 916617",
        "url": "https://bugzilla.suse.com/916617"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 920183",
        "url": "https://bugzilla.suse.com/920183"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 920238",
        "url": "https://bugzilla.suse.com/920238"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 926510",
        "url": "https://bugzilla.suse.com/926510"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 936327",
        "url": "https://bugzilla.suse.com/936327"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 937837",
        "url": "https://bugzilla.suse.com/937837"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 942441",
        "url": "https://bugzilla.suse.com/942441"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 942587",
        "url": "https://bugzilla.suse.com/942587"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 943216",
        "url": "https://bugzilla.suse.com/943216"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 943218",
        "url": "https://bugzilla.suse.com/943218"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 944300",
        "url": "https://bugzilla.suse.com/944300"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 946386",
        "url": "https://bugzilla.suse.com/946386"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 951351",
        "url": "https://bugzilla.suse.com/951351"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 951559",
        "url": "https://bugzilla.suse.com/951559"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 951608",
        "url": "https://bugzilla.suse.com/951608"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 951629",
        "url": "https://bugzilla.suse.com/951629"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 954982",
        "url": "https://bugzilla.suse.com/954982"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 956773",
        "url": "https://bugzilla.suse.com/956773"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962318",
        "url": "https://bugzilla.suse.com/962318"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962784",
        "url": "https://bugzilla.suse.com/962784"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962802",
        "url": "https://bugzilla.suse.com/962802"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962960",
        "url": "https://bugzilla.suse.com/962960"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962966",
        "url": "https://bugzilla.suse.com/962966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962970",
        "url": "https://bugzilla.suse.com/962970"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962988",
        "url": "https://bugzilla.suse.com/962988"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962994",
        "url": "https://bugzilla.suse.com/962994"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962995",
        "url": "https://bugzilla.suse.com/962995"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 962997",
        "url": "https://bugzilla.suse.com/962997"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 963000",
        "url": "https://bugzilla.suse.com/963000"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 963002",
        "url": "https://bugzilla.suse.com/963002"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 975496",
        "url": "https://bugzilla.suse.com/975496"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 975981",
        "url": "https://bugzilla.suse.com/975981"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5194 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5194/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5219 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5219/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5300 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5300/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7691 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7691/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7692 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7692/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7701 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7701/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7702 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7702/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7703 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7703/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7704 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7704/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7705 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7848 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7848/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7849 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7849/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7850 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7850/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7851 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7851/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7852 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7852/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7853 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7854 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7854/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7855 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7855/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7871 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7871/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7973 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7973/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7974 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7974/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7975 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7975/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7976 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7976/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7977 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7977/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7978 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7978/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7979 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7979/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8138 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8138/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8139 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8139/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8140 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8140/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8158 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8158/"
      }
    ],
    "title": "Security update for ntp",
    "tracking": {
      "current_release_date": "2016-05-17T09:29:35Z",
      "generator": {
        "date": "2016-05-17T09:29:35Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:1311-1",
      "initial_release_date": "2016-05-17T09:29:35Z",
      "revision_history": [
        {
          "date": "2016-05-17T09:29:35Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p6-41.1.i586",
                "product": {
                  "name": "ntp-4.2.8p6-41.1.i586",
                  "product_id": "ntp-4.2.8p6-41.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p6-41.1.i586",
                "product": {
                  "name": "ntp-doc-4.2.8p6-41.1.i586",
                  "product_id": "ntp-doc-4.2.8p6-41.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "yast2-ntp-client-2.17.14.1-1.12.1.noarch",
                "product": {
                  "name": "yast2-ntp-client-2.17.14.1-1.12.1.noarch",
                  "product_id": "yast2-ntp-client-2.17.14.1-1.12.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p6-41.1.s390x",
                "product": {
                  "name": "ntp-4.2.8p6-41.1.s390x",
                  "product_id": "ntp-4.2.8p6-41.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p6-41.1.s390x",
                "product": {
                  "name": "ntp-doc-4.2.8p6-41.1.s390x",
                  "product_id": "ntp-doc-4.2.8p6-41.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p6-41.1.x86_64",
                "product": {
                  "name": "ntp-4.2.8p6-41.1.x86_64",
                  "product_id": "ntp-4.2.8p6-41.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p6-41.1.x86_64",
                "product": {
                  "name": "ntp-doc-4.2.8p6-41.1.x86_64",
                  "product_id": "ntp-doc-4.2.8p6-41.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 5",
                "product": {
                  "name": "SUSE OpenStack Cloud 5",
                  "product_id": "SUSE OpenStack Cloud 5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:cloud:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager 2.1",
                "product": {
                  "name": "SUSE Manager 2.1",
                  "product_id": "SUSE Manager 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:2.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy 2.1",
                "product": {
                  "name": "SUSE Manager Proxy 2.1",
                  "product_id": "SUSE Manager Proxy 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-proxy:2.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles_ltss:11:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles_ltss:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:11:sp3:teradata"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.s390x as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x"
        },
        "product_reference": "ntp-4.2.8p6-41.1.s390x",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.s390x as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.s390x",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586"
        },
        "product_reference": "ntp-4.2.8p6-41.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x"
        },
        "product_reference": "ntp-4.2.8p6-41.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "yast2-ntp-client-2.17.14.1-1.12.1.noarch as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch"
        },
        "product_reference": "yast2-ntp-client-2.17.14.1-1.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586"
        },
        "product_reference": "ntp-4.2.8p6-41.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x"
        },
        "product_reference": "ntp-4.2.8p6-41.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586"
        },
        "product_reference": "ntp-4.2.8p6-41.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x"
        },
        "product_reference": "ntp-4.2.8p6-41.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p6-41.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p6-41.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p6-41.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-5194",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5194"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5194",
          "url": "https://www.suse.com/security/cve/CVE-2015-5194"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943216 for CVE-2015-5194",
          "url": "https://bugzilla.suse.com/943216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943218 for CVE-2015-5194",
          "url": "https://bugzilla.suse.com/943218"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943219 for CVE-2015-5194",
          "url": "https://bugzilla.suse.com/943219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943221 for CVE-2015-5194",
          "url": "https://bugzilla.suse.com/943221"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-5194",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-5194"
    },
    {
      "cve": "CVE-2015-5219",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5219"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5219",
          "url": "https://www.suse.com/security/cve/CVE-2015-5219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943216 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/943216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943218 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/943218"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943219 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/943219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943221 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/943221"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5219"
    },
    {
      "cve": "CVE-2015-5300",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5300"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5300",
          "url": "https://www.suse.com/security/cve/CVE-2015-5300"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951629 for CVE-2015-5300",
          "url": "https://bugzilla.suse.com/951629"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-5300",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962624 for CVE-2015-5300",
          "url": "https://bugzilla.suse.com/962624"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5300"
    },
    {
      "cve": "CVE-2015-7691",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7691"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7691",
          "url": "https://www.suse.com/security/cve/CVE-2015-7691"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7691"
    },
    {
      "cve": "CVE-2015-7692",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7692"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7692",
          "url": "https://www.suse.com/security/cve/CVE-2015-7692"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7692"
    },
    {
      "cve": "CVE-2015-7701",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7701"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7701",
          "url": "https://www.suse.com/security/cve/CVE-2015-7701"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7701"
    },
    {
      "cve": "CVE-2015-7702",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7702"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7702",
          "url": "https://www.suse.com/security/cve/CVE-2015-7702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7702"
    },
    {
      "cve": "CVE-2015-7703",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7703"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The \"pidfile\" or \"driftfile\" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7703",
          "url": "https://www.suse.com/security/cve/CVE-2015-7703"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943216 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943218 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943218"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943219 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943221 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943221"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7703"
    },
    {
      "cve": "CVE-2015-7704",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7704"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted \"KOD\" messages.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7704",
          "url": "https://www.suse.com/security/cve/CVE-2015-7704"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952611 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/952611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/977446"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7704"
    },
    {
      "cve": "CVE-2015-7705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7705",
          "url": "https://www.suse.com/security/cve/CVE-2015-7705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952611 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/952611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7705"
    },
    {
      "cve": "CVE-2015-7848",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7848"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7848",
          "url": "https://www.suse.com/security/cve/CVE-2015-7848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7848"
    },
    {
      "cve": "CVE-2015-7849",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7849"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7849",
          "url": "https://www.suse.com/security/cve/CVE-2015-7849"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7849"
    },
    {
      "cve": "CVE-2015-7850",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7850"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7850",
          "url": "https://www.suse.com/security/cve/CVE-2015-7850"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7850"
    },
    {
      "cve": "CVE-2015-7851",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7851"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use \u0027\\\u0027 or \u0027/\u0027 characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7851",
          "url": "https://www.suse.com/security/cve/CVE-2015-7851"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7851"
    },
    {
      "cve": "CVE-2015-7852",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7852"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7852",
          "url": "https://www.suse.com/security/cve/CVE-2015-7852"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7852"
    },
    {
      "cve": "CVE-2015-7853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7853",
          "url": "https://www.suse.com/security/cve/CVE-2015-7853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7853"
    },
    {
      "cve": "CVE-2015-7854",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7854"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7854",
          "url": "https://www.suse.com/security/cve/CVE-2015-7854"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7854"
    },
    {
      "cve": "CVE-2015-7855",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7855"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7855",
          "url": "https://www.suse.com/security/cve/CVE-2015-7855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7855"
    },
    {
      "cve": "CVE-2015-7871",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7871"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7871",
          "url": "https://www.suse.com/security/cve/CVE-2015-7871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952606 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/952606"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7871"
    },
    {
      "cve": "CVE-2015-7973",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7973"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7973",
          "url": "https://www.suse.com/security/cve/CVE-2015-7973"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7973",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7973",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7973"
    },
    {
      "cve": "CVE-2015-7974",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7974"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7974",
          "url": "https://www.suse.com/security/cve/CVE-2015-7974"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7974",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962960 for CVE-2015-7974",
          "url": "https://bugzilla.suse.com/962960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7974",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-7974"
    },
    {
      "cve": "CVE-2015-7975",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7975"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7975",
          "url": "https://www.suse.com/security/cve/CVE-2015-7975"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7975",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962988 for CVE-2015-7975",
          "url": "https://bugzilla.suse.com/962988"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7975",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-7975"
    },
    {
      "cve": "CVE-2015-7976",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7976"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7976",
          "url": "https://www.suse.com/security/cve/CVE-2015-7976"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962802 for CVE-2015-7976",
          "url": "https://bugzilla.suse.com/962802"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7976",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-7976"
    },
    {
      "cve": "CVE-2015-7977",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7977"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7977",
          "url": "https://www.suse.com/security/cve/CVE-2015-7977"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7977",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962970 for CVE-2015-7977",
          "url": "https://bugzilla.suse.com/962970"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7977",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7977"
    },
    {
      "cve": "CVE-2015-7978",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7978"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7978",
          "url": "https://www.suse.com/security/cve/CVE-2015-7978"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962970 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/962970"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/962995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963000 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/963000"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7978"
    },
    {
      "cve": "CVE-2015-7979",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7979"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7979",
          "url": "https://www.suse.com/security/cve/CVE-2015-7979"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962784 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/962784"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/962995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977459 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/977459"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982065 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/982065"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7979"
    },
    {
      "cve": "CVE-2015-8138",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8138"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8138",
          "url": "https://www.suse.com/security/cve/CVE-2015-8138"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963002 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/963002"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974668 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/974668"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/977446"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8138"
    },
    {
      "cve": "CVE-2015-8139",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8139"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8139",
          "url": "https://www.suse.com/security/cve/CVE-2015-8139"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-8139",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8139",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962997 for CVE-2015-8139",
          "url": "https://bugzilla.suse.com/962997"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8139"
    },
    {
      "cve": "CVE-2015-8140",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8140"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8140",
          "url": "https://www.suse.com/security/cve/CVE-2015-8140"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-8140",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8140",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962994 for CVE-2015-8140",
          "url": "https://bugzilla.suse.com/962994"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8140"
    },
    {
      "cve": "CVE-2015-8158",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8158"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8158",
          "url": "https://www.suse.com/security/cve/CVE-2015-8158"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8158",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962966 for CVE-2015-8158",
          "url": "https://bugzilla.suse.com/962966"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1.noarch",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-05-17T09:29:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-8158"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for ntp",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This ntp update provides the following security and non security fixes:\n\n- Update to 4.2.8p4 to fix several security issues (bsc#951608):\n  * CVE-2015-7871: NAK to the Future: Symmetric association\n    authentication bypass via crypto-NAK\n  * CVE-2015-7855: decodenetnum() will ASSERT botch instead of\n    returning FAIL on some bogus values\n  * CVE-2015-7854: Password Length Memory Corruption Vulnerability\n  * CVE-2015-7853: Invalid length data provided by a custom\n    refclock driver could cause a buffer overflow\n  * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability\n  * CVE-2015-7851 saveconfig Directory Traversal Vulnerability\n  * CVE-2015-7850 remote config logfile-keyfile\n  * CVE-2015-7849 trusted key use-after-free\n  * CVE-2015-7848 mode 7 loop counter underrun\n  * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC\n  * CVE-2015-7703 configuration directives \u0027pidfile\u0027 and\n    \u0027driftfile\u0027 should only be allowed locally\n  * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should\n    validate the origin timestamp field\n  * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey\n    data packet length checks\n- Use ntpq instead of deprecated ntpdc in start-ntpd (bnc#936327).\n- Add a controlkey to ntp.conf to make the above work.\n- Improve runtime configuration:\n  * Read keytype from ntp.conf\n  * Don\u0027t write ntp keys to syslog.\n- Don\u0027t let \u0027keysdir\u0027 lines in ntp.conf trigger the \u0027keys\u0027 parser.\n- Fix the comment regarding addserver in ntp.conf (bnc#910063).\n- Remove ntp.1.gz, it wasn\u0027t installed anymore.\n- Remove ntp-4.2.7-rh-manpages.tar.gz and only keep ntptime.8.gz.\n  The rest is partially irrelevant, partially redundant and\n  potentially outdated (bsc#942587).\n- Remove \u0027kod\u0027 from the restrict line in ntp.conf (bsc#944300).\n- Use SHA1 instead of MD5 for symmetric keys (bsc#905885).\n- Require perl-Socket6 (bsc#942441).\n- Fix incomplete backporting of \u0027rcntp ntptimemset\u0027.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sledsp4-ntp-12218,slessp4-ntp-12218",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_2058-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2015:2058-1",
        "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20152058-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2015:2058-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-November/001688.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 905885",
        "url": "https://bugzilla.suse.com/905885"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 910063",
        "url": "https://bugzilla.suse.com/910063"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 936327",
        "url": "https://bugzilla.suse.com/936327"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 942441",
        "url": "https://bugzilla.suse.com/942441"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 942587",
        "url": "https://bugzilla.suse.com/942587"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 944300",
        "url": "https://bugzilla.suse.com/944300"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 951608",
        "url": "https://bugzilla.suse.com/951608"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7691 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7691/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7692 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7692/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7701 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7701/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7702 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7702/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7703 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7703/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7704 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7704/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7705 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7848 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7848/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7849 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7849/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7850 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7850/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7851 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7851/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7852 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7852/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7853 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7854 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7854/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7855 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7855/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7871 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7871/"
      }
    ],
    "title": "Security update for ntp",
    "tracking": {
      "current_release_date": "2015-11-20T09:21:30Z",
      "generator": {
        "date": "2015-11-20T09:21:30Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2015:2058-1",
      "initial_release_date": "2015-11-20T09:21:30Z",
      "revision_history": [
        {
          "date": "2015-11-20T09:21:30Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p4-5.1.i586",
                "product": {
                  "name": "ntp-4.2.8p4-5.1.i586",
                  "product_id": "ntp-4.2.8p4-5.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p4-5.1.i586",
                "product": {
                  "name": "ntp-doc-4.2.8p4-5.1.i586",
                  "product_id": "ntp-doc-4.2.8p4-5.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p4-5.1.ia64",
                "product": {
                  "name": "ntp-4.2.8p4-5.1.ia64",
                  "product_id": "ntp-4.2.8p4-5.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p4-5.1.ia64",
                "product": {
                  "name": "ntp-doc-4.2.8p4-5.1.ia64",
                  "product_id": "ntp-doc-4.2.8p4-5.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p4-5.1.ppc64",
                "product": {
                  "name": "ntp-4.2.8p4-5.1.ppc64",
                  "product_id": "ntp-4.2.8p4-5.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p4-5.1.ppc64",
                "product": {
                  "name": "ntp-doc-4.2.8p4-5.1.ppc64",
                  "product_id": "ntp-doc-4.2.8p4-5.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p4-5.1.s390x",
                "product": {
                  "name": "ntp-4.2.8p4-5.1.s390x",
                  "product_id": "ntp-4.2.8p4-5.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p4-5.1.s390x",
                "product": {
                  "name": "ntp-doc-4.2.8p4-5.1.s390x",
                  "product_id": "ntp-doc-4.2.8p4-5.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p4-5.1.x86_64",
                "product": {
                  "name": "ntp-4.2.8p4-5.1.x86_64",
                  "product_id": "ntp-4.2.8p4-5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p4-5.1.x86_64",
                "product": {
                  "name": "ntp-doc-4.2.8p4-5.1.x86_64",
                  "product_id": "ntp-doc-4.2.8p4-5.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 11 SP4",
                  "product_id": "SUSE Linux Enterprise Desktop 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sled:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586"
        },
        "product_reference": "ntp-4.2.8p4-5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p4-5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586"
        },
        "product_reference": "ntp-4.2.8p4-5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64"
        },
        "product_reference": "ntp-4.2.8p4-5.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64"
        },
        "product_reference": "ntp-4.2.8p4-5.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x"
        },
        "product_reference": "ntp-4.2.8p4-5.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p4-5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586"
        },
        "product_reference": "ntp-4.2.8p4-5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64"
        },
        "product_reference": "ntp-4.2.8p4-5.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64"
        },
        "product_reference": "ntp-4.2.8p4-5.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x"
        },
        "product_reference": "ntp-4.2.8p4-5.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p4-5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p4-5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p4-5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p4-5.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-7691",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7691"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7691",
          "url": "https://www.suse.com/security/cve/CVE-2015-7691"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7691"
    },
    {
      "cve": "CVE-2015-7692",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7692"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7692",
          "url": "https://www.suse.com/security/cve/CVE-2015-7692"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7692"
    },
    {
      "cve": "CVE-2015-7701",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7701"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7701",
          "url": "https://www.suse.com/security/cve/CVE-2015-7701"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7701"
    },
    {
      "cve": "CVE-2015-7702",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7702"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7702",
          "url": "https://www.suse.com/security/cve/CVE-2015-7702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7702"
    },
    {
      "cve": "CVE-2015-7703",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7703"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The \"pidfile\" or \"driftfile\" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7703",
          "url": "https://www.suse.com/security/cve/CVE-2015-7703"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943216 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943218 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943218"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943219 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943221 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943221"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7703"
    },
    {
      "cve": "CVE-2015-7704",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7704"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted \"KOD\" messages.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7704",
          "url": "https://www.suse.com/security/cve/CVE-2015-7704"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952611 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/952611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/977446"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7704"
    },
    {
      "cve": "CVE-2015-7705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7705",
          "url": "https://www.suse.com/security/cve/CVE-2015-7705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952611 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/952611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7705"
    },
    {
      "cve": "CVE-2015-7848",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7848"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7848",
          "url": "https://www.suse.com/security/cve/CVE-2015-7848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7848"
    },
    {
      "cve": "CVE-2015-7849",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7849"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7849",
          "url": "https://www.suse.com/security/cve/CVE-2015-7849"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7849"
    },
    {
      "cve": "CVE-2015-7850",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7850"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7850",
          "url": "https://www.suse.com/security/cve/CVE-2015-7850"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7850"
    },
    {
      "cve": "CVE-2015-7851",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7851"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use \u0027\\\u0027 or \u0027/\u0027 characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7851",
          "url": "https://www.suse.com/security/cve/CVE-2015-7851"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7851"
    },
    {
      "cve": "CVE-2015-7852",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7852"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7852",
          "url": "https://www.suse.com/security/cve/CVE-2015-7852"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7852"
    },
    {
      "cve": "CVE-2015-7853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7853",
          "url": "https://www.suse.com/security/cve/CVE-2015-7853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7853"
    },
    {
      "cve": "CVE-2015-7854",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7854"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7854",
          "url": "https://www.suse.com/security/cve/CVE-2015-7854"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7854"
    },
    {
      "cve": "CVE-2015-7855",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7855"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7855",
          "url": "https://www.suse.com/security/cve/CVE-2015-7855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7855"
    },
    {
      "cve": "CVE-2015-7871",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7871"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7871",
          "url": "https://www.suse.com/security/cve/CVE-2015-7871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952606 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/952606"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p4-5.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p4-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-11-20T09:21:30Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7871"
    }
  ]
}

{
  "bids": {
    "bid": {
      "bidNumber": "77287"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-7871"
    }
  },
  "description": "NTP\u662f\u4e00\u79cd\u4ee5\u6570\u636e\u5305\u4ea4\u6362\u628a\u4e24\u53f0\u7535\u8111\u7684\u65f6\u949f\u540c\u6b65\u5316\u7684\u7f51\u7edc\u534f\u8bae\u3002\r\n\r\nNTP\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u53d1\u9001\u4f7f\u7528\u6570\u636e\u5bc6\u7801\u8ba4\u8bc1\u7684NTP\u6570\u636e\u5305\uff0c\u63d2\u5165\u6076\u610f\u7684\u65f6\u95f4\u6570\u636e\uff0c\u5bfc\u81f4\u7cfb\u7edf\u65f6\u949f\u8bbe\u7f6e\u9519\u8bef\u3002",
  "discovererName": "Matthew Van Gundy",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttp://support.ntp.org/bin/view/Main/NtpBug2941",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-07182",
  "openTime": "2015-11-03",
  "patchDescription": "NTP\u662f\u4e00\u79cd\u4ee5\u6570\u636e\u5305\u4ea4\u6362\u628a\u4e24\u53f0\u7535\u8111\u7684\u65f6\u949f\u540c\u6b65\u5316\u7684\u7f51\u7edc\u534f\u8bae\u3002\r\nNTP\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u53d1\u9001\u4f7f\u7528\u6570\u636e\u5bc6\u7801\u8ba4\u8bc1\u7684NTP\u6570\u636e\u5305\uff0c\u63d2\u5165\u6076\u610f\u7684\u65f6\u95f4\u6570\u636e\uff0c\u5bfc\u81f4\u7cfb\u7edf\u65f6\u949f\u8bbe\u7f6e\u9519\u8bef\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "NTP\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Ntp Ntp \u003c4.2.8p4",
      "Ntp Ntp  4.3.x(\u003c4.3.77)"
    ]
  },
  "referenceLink": "http://support.ntp.org/bin/view/Main/NtpBug2941",
  "serverity": "\u4e2d",
  "submitTime": "2015-11-01",
  "title": "NTP\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e"
}

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "TIM 4R-IE devices contain multiple vulnerabilities in the integrated NTP component as listed below.\n\nSiemens recommends specific countermeasures for products where fixes are not, or not yet available.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-497656: Multiple NTP Vulnerabilities in TIM 4R-IE Devices - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-497656.html"
      },
      {
        "category": "self",
        "summary": "SSA-497656: Multiple NTP Vulnerabilities in TIM 4R-IE Devices - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-497656.json"
      }
    ],
    "title": "SSA-497656: Multiple NTP Vulnerabilities in TIM 4R-IE Devices",
    "tracking": {
      "current_release_date": "2025-06-10T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-497656",
      "initial_release_date": "2021-04-13T00:00:00Z",
      "revision_history": [
        {
          "date": "2021-04-13T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2025-06-10T00:00:00Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Expanded affected TIM 4R-IE product families to individual products, incl. MLFB IDs; CVE-2015-5219: changed CWE from CWE-704 to CWE-681; CVE-2015-7973: changed CWE from CWE-254 to CWE-294; CVE-2015-7979: changed CWE from CWE-19 to CWE-821; CVE-2016-1547: changed CWE from CWE-20 to CWE-821; CVE-2016-1548: changed CWE from CWE-19 to CWE-290"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)",
                  "product_id": "1",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1800-4BA00-7AA0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET TIM 4R-IE (6AG1800-4BA00-7AA0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)",
                  "product_id": "2",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1803-4BA00-7AA0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET TIM 4R-IE DNP3 (6AG1803-4BA00-7AA0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "TIM 4R-IE (6NH7800-4BA00)",
                  "product_id": "3",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6NH7800-4BA00"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "TIM 4R-IE (6NH7800-4BA00)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "TIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)",
                  "product_id": "4",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6NH7803-4BA00-0AA0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "TIM 4R-IE DNP3 (6NH7803-4BA00-0AA0)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-5219",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2015-5219"
    },
    {
      "cve": "CVE-2015-7705",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2015-7705"
    },
    {
      "cve": "CVE-2015-7855",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2015-7855"
    },
    {
      "cve": "CVE-2015-7871",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2015-7871"
    },
    {
      "cve": "CVE-2015-7973",
      "cwe": {
        "id": "CWE-294",
        "name": "Authentication Bypass by Capture-replay"
      },
      "notes": [
        {
          "category": "summary",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2015-7973"
    },
    {
      "cve": "CVE-2015-7974",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2015-7974"
    },
    {
      "cve": "CVE-2015-7977",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2015-7977"
    },
    {
      "cve": "CVE-2015-7979",
      "cwe": {
        "id": "CWE-821",
        "name": "Incorrect Synchronization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2015-7979"
    },
    {
      "cve": "CVE-2015-8138",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2015-8138"
    },
    {
      "cve": "CVE-2016-1547",
      "cwe": {
        "id": "CWE-821",
        "name": "Incorrect Synchronization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2016-1547"
    },
    {
      "cve": "CVE-2016-1548",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-\u003edst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2016-1548"
    },
    {
      "cve": "CVE-2016-1550",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2016-1550"
    },
    {
      "cve": "CVE-2016-4953",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2016-4953"
    },
    {
      "cve": "CVE-2016-4954",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Deactivate NTP-based time syncronization of the device, if enabled. The feature is disabled by default.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        },
        {
          "category": "workaround",
          "details": "Configure an additional firewall to prevent communication to the port udp/123 of an affected device.",
          "product_ids": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4"
          ]
        }
      ],
      "title": "CVE-2016-4954"
    }
  ]
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201708-0039",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "ntp",
        "version": "4.2.8"
      },
      {
        "model": "ntp",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "ntp",
        "version": "4.3.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "8.0"
      },
      {
        "model": "ntp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ntp",
        "version": "4.2.8"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "ntp",
        "version": "4.2.5"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "7.0"
      },
      {
        "model": "ntp",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "ntp",
        "version": "4.2.6"
      },
      {
        "model": "clustered data ontap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "model": "oncommand performance manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "model": "oncommand unified manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "model": "ntp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "ntp",
        "version": "4.3.77"
      },
      {
        "model": "data ontap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "model": "oncommand balance",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.9,
        "vendor": "ntp",
        "version": "4.3.70"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "ntp",
        "version": null
      },
      {
        "model": "ntp",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "ntp",
        "version": "4.2.8p4  less than  4.2.x"
      },
      {
        "model": "ntp",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "ntp",
        "version": "4.3.77  less than  4.3.x"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "ntp",
        "version": "4.3.67"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "ntp",
        "version": "4.3.74"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "ntp",
        "version": "4.3.68"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "ntp",
        "version": "4.3.69"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "ntp",
        "version": "4.3.72"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "ntp",
        "version": "4.3.73"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "ntp",
        "version": "4.3.75"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "ntp",
        "version": "4.3.76"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "ntp",
        "version": "4.3.71"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "slackware",
        "version": "14.1"
      },
      {
        "model": "linux x86 64 -current",
        "scope": null,
        "trust": 0.3,
        "vendor": "slackware",
        "version": null
      },
      {
        "model": "linux x86 64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "slackware",
        "version": "14.1"
      },
      {
        "model": "linux x86 64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "slackware",
        "version": "14.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "slackware",
        "version": "14.0"
      },
      {
        "model": "linux x86 64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "slackware",
        "version": "13.37"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "slackware",
        "version": "13.37"
      },
      {
        "model": "linux x86 64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "slackware",
        "version": "13.1"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "slackware",
        "version": "13.1"
      },
      {
        "model": "linux x86 64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "slackware",
        "version": "13.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "slackware",
        "version": "13.0"
      },
      {
        "model": "linux -current",
        "scope": null,
        "trust": 0.3,
        "vendor": "slackware",
        "version": null
      },
      {
        "model": "ruggedcom rox",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "2.6.3"
      },
      {
        "model": "ruggedcom rox",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "2.6.2"
      },
      {
        "model": "ruggedcom rox",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "2.0"
      },
      {
        "model": "ruggedcom rox",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "1.16"
      },
      {
        "model": "ruggedcom rox",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "1.14.5"
      },
      {
        "model": "ruggedcom rox",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "1.0"
      },
      {
        "model": "automation stratix",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "rockwell",
        "version": "59000"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ntp",
        "version": "4.3.25"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ntp",
        "version": "4.3"
      },
      {
        "model": "ntp",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ntp",
        "version": "4.2.6"
      },
      {
        "model": "4.2.8p3",
        "scope": null,
        "trust": 0.3,
        "vendor": "ntp",
        "version": null
      },
      {
        "model": "4.2.8p2",
        "scope": null,
        "trust": 0.3,
        "vendor": "ntp",
        "version": null
      },
      {
        "model": "4.2.7p366",
        "scope": null,
        "trust": 0.3,
        "vendor": "ntp",
        "version": null
      },
      {
        "model": "4.2.7p111",
        "scope": null,
        "trust": 0.3,
        "vendor": "ntp",
        "version": null
      },
      {
        "model": "4.2.7p11",
        "scope": null,
        "trust": 0.3,
        "vendor": "ntp",
        "version": null
      },
      {
        "model": "4.2.5p186",
        "scope": null,
        "trust": 0.3,
        "vendor": "ntp",
        "version": null
      },
      {
        "model": "junos os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "juniper",
        "version": "0"
      },
      {
        "model": "qlogic virtual fabric extension module for ibm bladecenter",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "9.0"
      },
      {
        "model": "qlogic 8gb intelligent pass-thru module and san switch module",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "7.10"
      },
      {
        "model": "ib6131 gb infiniband switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "83.4"
      },
      {
        "model": "ib6131 gb infiniband switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "83.2"
      },
      {
        "model": "flex system fc3171 8gb san switch and san pass-thru",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "9.1.0.00"
      },
      {
        "model": "flex system en6131 40gb ethernet switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "3.4"
      },
      {
        "model": "flex system en6131 40gb ethernet switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "3.2"
      },
      {
        "model": "vsr1008 comware virtual services router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "70"
      },
      {
        "model": "vsr1004 comware virtual services router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "70"
      },
      {
        "model": "vsr1001 virtual services router day evaluation software",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "600"
      },
      {
        "model": "vsr1001 comware virtual services router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "70"
      },
      {
        "model": "msr4080 router chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr4060 router chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr4000 taa-compliant mpu-100 main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr4000 mpu-100 main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr3064 router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr3044 router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr3024 taa-compliant ac router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr3024 poe router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr3024 dc router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr3024 ac router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr3012 dc router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr3012 ac router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr2004-48 router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr2004-24 ac router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr2003 taa-compliant ac router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr2003 ac router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr1003-8s ac router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "msr1002-4 ac router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "hsr6808 router chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "hsr6804 router chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "hsr6802 router chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "hsr6800 rse-x3 router main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "hsr6800 rse-x2 router taa-compliant main processing",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "hsr6800 rse-x2 router main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "hsr6602-xg taa-compliant router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "hsr6602-xg router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "hsr6602-g taa-compliant router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "hsr6602-g router",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric taa-compliant switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "79100"
      },
      {
        "model": "flexfabric switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "79100"
      },
      {
        "model": "flexfabric 7.2tbps taa-compliant fabric/main processing uni",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "79100"
      },
      {
        "model": "flexfabric 7.2tbps fabric main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "7910/0"
      },
      {
        "model": "flexfabric 2.4tbps taa-compliant fabric/main processing uni",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "79100"
      },
      {
        "model": "flexfabric 2.4tbps fabric main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "7910/0"
      },
      {
        "model": "flexfabric taa-compliant switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "79040"
      },
      {
        "model": "flexfabric switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "79040"
      },
      {
        "model": "flexfabric 4-slot taa-compliant switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "59300"
      },
      {
        "model": "flexfabric 4-slot switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "59300"
      },
      {
        "model": "flexfabric 32qsfp+ taa-compliant switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "59300"
      },
      {
        "model": "flexfabric 32qsfp+ switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "59300"
      },
      {
        "model": "flexfabric 2qsfp+ 2-slot taa-compliant switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "59300"
      },
      {
        "model": "flexfabric 2qsfp+ 2-slot switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "59300"
      },
      {
        "model": "flexfabric 5900cp 48xg 4qsfp+ taa-compliant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric 5700-48g-4xg-2qsfp+ taa-compliant switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric 5700-48g-4xg-2qsfp+ switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric 5700-40xg-2qsfp+ taa-compliant switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric 5700-40xg-2qsfp+ switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric 5700-32xgt-8xg-2qsfp+ taa-compliant switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric 5700-32xgt-8xg-2qsfp+ switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric 12916e switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric switch ac chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "129160"
      },
      {
        "model": "flexfabric main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "129160"
      },
      {
        "model": "flexfabric taa-compliant switch ac chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "129100"
      },
      {
        "model": "flexfabric taa-compliant main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "129100"
      },
      {
        "model": "flexfabric switch ac chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "129100"
      },
      {
        "model": "flexfabric main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "129100"
      },
      {
        "model": "flexfabric 12908e switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric 12904e switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric 12904e main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric 12900e main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "flexfabric switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "11908-v0"
      },
      {
        "model": "flexfabric main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "119000"
      },
      {
        "model": "ff 5900cp-48xg-4qsfp+ switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "ff 12518e dc switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "ff 12518e ac switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "ff 12508e dc switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "ff 12508e ac switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "ff 12500e mpu",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "a12518 switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "a12508 switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "75100"
      },
      {
        "model": "switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "75060"
      },
      {
        "model": "switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "75030"
      },
      {
        "model": "switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "75020"
      },
      {
        "model": "main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "75020"
      },
      {
        "model": "5920af-24xg taa switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5920af-24xg switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5900af-48xgt-4qsfp+ switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5900af-48xg-4qsfp+ taa switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5900af-48xg-4qsfp+ switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5900af-48g-4xg-2qsfp+ switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5900af 48xgt 4qsfp+ taa-compliant switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5900af 48g 4xg 2qsfp+ taa-compliant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "48g poe+ 4sfp+ hi 1-slot switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "55100"
      },
      {
        "model": "48g 4sfp+ hi 1-slot switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "55100"
      },
      {
        "model": "24g sfp 4sfp+ hi 1-slot switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "55100"
      },
      {
        "model": "24g poe+ 4sfp+ hi 1-slot switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "55100"
      },
      {
        "model": "24g 4sfp+ hi 1-slot switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "55100"
      },
      {
        "model": "5130-48g-poe+-4sfp+ ei switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-48g-poe+-4sfp+ ei brazil switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-48g-poe+-2sfp+-2xgt ei switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-48g-4sfp+ ei switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-48g-4sfp+ ei brazil switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-48g-2sfp+-2xgt ei switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-24g-sfp-4sfp+ ei switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-24g-poe+-4sfp+ ei switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-24g-poe+-4sfp+ ei brazil switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-24g-poe+-2sfp+-2xgt ei switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-24g-4sfp+ ei switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-24g-4sfp+ ei brazil switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "5130-24g-2sfp+-2xgt ei switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "48g poe+ 4sfp+ 1-slot hi switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "51300"
      },
      {
        "model": "48g 4sfp+ 1-slot hi switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "51300"
      },
      {
        "model": "24g poe+ 4sfp+ 1-slot hi switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "51300"
      },
      {
        "model": "24g 4sfp+ 1-slot hi switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "51300"
      },
      {
        "model": "1950-48g-2sfp+-2xgt-poe+ switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "1950-48g-2sfp+-2xgt switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "1950-24g-4xg switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "1950-24g-2sfp+-2xgt-poe+ switch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "0"
      },
      {
        "model": "switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "125180"
      },
      {
        "model": "dc switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "125180"
      },
      {
        "model": "ac switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "125180"
      },
      {
        "model": "switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "125080"
      },
      {
        "model": "dc switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "125080"
      },
      {
        "model": "ac switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "125080"
      },
      {
        "model": "dc switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "125040"
      },
      {
        "model": "ac switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "125040"
      },
      {
        "model": "mpu w/comware os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "12500v70"
      },
      {
        "model": "main processing unit",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "125000"
      },
      {
        "model": "taa switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "105120"
      },
      {
        "model": "switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "105120"
      },
      {
        "model": "taa switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "10508-v0"
      },
      {
        "model": "switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "10508-v0"
      },
      {
        "model": "taa switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "105080"
      },
      {
        "model": "switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "105080"
      },
      {
        "model": "taa switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "105040"
      },
      {
        "model": "switch chassis",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "105040"
      },
      {
        "model": "type d taa-compliant with comware os main processing un",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "10500v70"
      },
      {
        "model": "type d main processing unit with comware os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "10500v70"
      },
      {
        "model": "type a mpu w/comware os",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "hp",
        "version": "10500v70"
      },
      {
        "model": "linux",
        "scope": null,
        "trust": 0.3,
        "vendor": "gentoo",
        "version": null
      },
      {
        "model": "9.3-release-p9",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p6",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p5",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p3",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p25",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p24",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p22",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p21",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p2",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p13",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p10",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-rc3-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-rc2-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-rc2",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-rc1-p2",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-rc",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-prerelease",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-beta3-p2",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-beta1-p2",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-beta1-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-beta1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "freebsd",
        "version": "9.3"
      },
      {
        "model": "10.2-rc2-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.2-rc1-p2",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.2-rc1-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.2-prerelease",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.2-beta2-p3",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.2-beta2-p2",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "freebsd",
        "version": "10.2"
      },
      {
        "model": "10.1-stable",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-releng",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-release-p9",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-release-p6",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-release-p5",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-release-p19",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-release-p17",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-release-p16",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-release-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-release",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-rc4-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-rc3-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-rc2-p3",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-rc2-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-rc1-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-prerelease",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-beta3-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-beta1-p1",
        "scope": null,
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "freebsd",
        "version": "10.1"
      },
      {
        "model": "summit wm3000 series",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "0"
      },
      {
        "model": "purview appliance",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "6.3"
      },
      {
        "model": "purview appliance",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "6.0"
      },
      {
        "model": "netsight appliance",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "6.3"
      },
      {
        "model": "netsight appliance",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "6.0"
      },
      {
        "model": "nac appliance",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "6.3"
      },
      {
        "model": "nac appliance",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "6.0"
      },
      {
        "model": "extremexos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "16.1.2"
      },
      {
        "model": "extremexos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "15.7.4"
      },
      {
        "model": "extremexos patch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "15.7.38"
      },
      {
        "model": "extremexos patch",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "15.7.31"
      },
      {
        "model": "extremexos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "15.7.2"
      },
      {
        "model": "extremexos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "15.7"
      },
      {
        "model": "extremexos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "15.6.4"
      },
      {
        "model": "extremexos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "16.1"
      },
      {
        "model": "extremexos 15.4.1.3-patch1-10",
        "scope": null,
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": null
      },
      {
        "model": "extremexos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "15.4.1.0"
      },
      {
        "model": "extremexos",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "15.3"
      },
      {
        "model": "linux sparc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux s/390",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux powerpc",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux mips",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux ia-64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux ia-32",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux arm",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "linux amd64",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "debian",
        "version": "6.0"
      },
      {
        "model": "ruggedcom rox",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "siemens",
        "version": "2.9.0"
      },
      {
        "model": "automation stratix",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "rockwell",
        "version": "590015.6.3"
      },
      {
        "model": "ntp",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "ntp",
        "version": "4.3.77"
      },
      {
        "model": "4.2.8p4",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "ntp",
        "version": null
      },
      {
        "model": "qlogic virtual fabric extension module for ibm bladecenter",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "9.0.3.14.0"
      },
      {
        "model": "qlogic 8gb intelligent pass-thru module and san switch module",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "7.10.1.37.00"
      },
      {
        "model": "ib6131 gb infiniband switch",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "83.5.1000"
      },
      {
        "model": "flex system fc3171 8gb san switch and san pass-thru",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "9.1.7.03.00"
      },
      {
        "model": "flex system en6131 40gb ethernet switch",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "ibm",
        "version": "3.5.1000"
      },
      {
        "model": "9.3-stable",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "9.3-release-p29",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.2-stable",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.2-release-p6",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "10.1-release-p23",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "freebsd",
        "version": null
      },
      {
        "model": "purview appliance",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "6.4"
      },
      {
        "model": "netsight appliance",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "6.4"
      },
      {
        "model": "nac appliance",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "6.4"
      },
      {
        "model": "extremexos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "21.1"
      },
      {
        "model": "extremexos",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "extremenetworks",
        "version": "16.2"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "77287"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-574"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7871"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p186:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p187:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p188:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p189:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p190:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p191:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p192:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p193:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p194:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p195:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p196:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p197:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p198:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p199:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p200:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p201:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p202:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p203:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p204:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p205:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p206:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p207:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p208:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p209:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p210:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p211:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p212:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p213:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p214:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p215:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p216:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p217:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p218:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p219:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p220:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p221:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p222:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p223:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p224:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p225:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p226:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p227:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p228:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p229:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p230:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p231_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p232_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p233_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p234_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p235_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p236_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p237_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p238_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p239_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p240_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p241_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p242_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p243_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p244_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p245_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p246_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p247_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p248_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p249_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p250_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.2.8",
                "versionStartIncluding": "4.2.6",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.3.77",
                "versionStartIncluding": "4.3.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:clustered_data_ontap:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:netapp:data_ontap:-:*:*:*:*:7-mode:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-7871"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Stephen Gray \u0026amp;amp;lt;stepgray@cisco.com\u0026amp;amp;gt;.",
    "sources": [
      {
        "db": "BID",
        "id": "77287"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2015-7871",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": true,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Low",
            "accessVector": "Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Partial",
            "baseScore": 7.5,
            "confidentialityImpact": "Partial",
            "exploitabilityScore": null,
            "id": "CVE-2015-7871",
            "impactScore": null,
            "integrityImpact": "Partial",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.9,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 9.8,
            "baseSeverity": "Critical",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2015-7871",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2015-7871",
            "trust": 1.8,
            "value": "CRITICAL"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201510-574",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULMON",
            "id": "CVE-2015-7871",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2015-7871"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-574"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7871"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication. NTP Contains an authentication vulnerability.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Network Time Protocol is prone to a authentication-bypass vulnerability. \nAn attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n\n\n. \n\nRelease Date: 2016-09-21\nLast Updated: 2016-09-21\n\nPotential Security Impact: Multiple Remote Vulnerabilities\n\nSource: Hewlett Packard Enterprise, Product Security Response Team\n\nVULNERABILITY SUMMARY\nPotential security vulnerabilities in NTP have been addressed with HPE\nComware 7 (CW7) network products. \n\nReferences:\n\n  - CVE-2015-7704\n  - CVE-2015-7705\n  - CVE-2015-7855\n  - CVE-2015-7871\n  - PSRT110228\n  - SSRT102943\n\nSUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed. \n  - Comware 7 (CW7) Products - Please refer to the RESOLUTION\n below for a list of impacted products. All product versions are impacted\nprior to the fixed versions listed. \n\nBACKGROUND\n\n  CVSS Base Metrics\n  =================\n  Reference, CVSS V3 Score/Vector, CVSS V2 Score/Vector\n\n    CVE-2015-7704\n      6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L\n      6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)\n\n    CVE-2015-7705\n      6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L\n      6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)\n\n    CVE-2015-7855\n      6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L\n      6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)\n\n    CVE-2015-7871\n      5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\n      5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N)\n\n    Information on CVSS is documented in\n    HPE Customer Notice HPSN-2008-002 here:\n\nhttps://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c01345499\n\nRESOLUTION\nHPE has released the following software updates to resolve the\nvulnerabilities in HPE Comware 7 network products. \n\n**COMWARE 7 Products**\n\n  + **12500 (Comware 7) - Version: R7377**\n    * HP Network Products\n      - JC072B HP 12500 Main Processing Unit\n      - JC085A HP A12518 Switch Chassis\n      - JC086A HP A12508 Switch Chassis\n      - JC652A HP 12508 DC Switch Chassis\n      - JC653A HP 12518 DC Switch Chassis\n      - JC654A HP 12504 AC Switch Chassis\n      - JC655A HP 12504 DC Switch Chassis\n      - JF430A HP A12518 Switch Chassis\n      - JF430B HP 12518 Switch Chassis\n      - JF430C HP 12518 AC Switch Chassis\n      - JF431A HP A12508 Switch Chassis\n      - JF431B HP 12508 Switch Chassis\n      - JF431C HP 12508 AC Switch Chassis\n      - JG497A HP 12500 MPU w/Comware V7 OS\n      - JG782A HP FF 12508E AC Switch Chassis\n      - JG783A HP FF 12508E DC Switch Chassis\n      - JG784A HP FF 12518E AC Switch Chassis\n      - JG785A HP FF 12518E DC Switch Chassis\n      - JG802A HP FF 12500E MPU\n  + **10500 (Comware 7) - Version: R7178**\n    * HP Network Products\n      - JC611A HP 10508-V Switch Chassis\n      - JC612A HP 10508 Switch Chassis\n      - JC613A HP 10504 Switch Chassis\n      - JC748A HP 10512 Switch Chassis\n      - JG608A HP FlexFabric 11908-V Switch Chassis\n      - JG609A HP FlexFabric 11900 Main Processing Unit\n      - JG820A HP 10504 TAA Switch Chassis\n      - JG821A HP 10508 TAA Switch Chassis\n      - JG822A HP 10508-V TAA Switch Chassis\n      - JG823A HP 10512 TAA Switch Chassis\n      - JG496A HP 10500 Type A MPU w/Comware v7 OS\n      - JH198A HP 10500 Type D Main Processing Unit with Comware v7 Operating\nSystem\n      - JH206A HP 10500 Type D TAA-compliant with Comware v7 Operating System\nMain Processing Unit\n  + **12900 (Comware 7) - Version: R1138P03**\n    * HP Network Products\n      - JG619A HP FlexFabric 12910 Switch AC Chassis\n      - JG621A HP FlexFabric 12910 Main Processing Unit\n      - JG632A HP FlexFabric 12916 Switch AC Chassis\n      - JG634A HP FlexFabric 12916 Main Processing Unit\n      - JH104A HP FlexFabric 12900E Main Processing Unit\n      - JH114A HP FlexFabric 12910 TAA-compliant Main Processing Unit\n      - JH263A HP FlexFabric 12904E Main Processing Unit\n      - JH255A HP FlexFabric 12908E Switch Chassis\n      - JH262A HP FlexFabric 12904E Switch Chassis\n      - JH113A HP FlexFabric 12910 TAA-compliant Switch AC Chassis\n      - JH103A HP FlexFabric 12916E Switch Chassis\n  + **5900 (Comware 7) - Version: R2422P02**\n    * HP Network Products\n      - JC772A HP 5900AF-48XG-4QSFP+ Switch\n      - JG296A HP 5920AF-24XG Switch\n      - JG336A HP 5900AF-48XGT-4QSFP+ Switch\n      - JG510A HP 5900AF-48G-4XG-2QSFP+ Switch\n      - JG554A HP 5900AF-48XG-4QSFP+ TAA Switch\n      - JG555A HP 5920AF-24XG TAA Switch\n      - JG838A HP FF 5900CP-48XG-4QSFP+ Switch\n      - JH036A HP FlexFabric 5900CP 48XG 4QSFP+ TAA-Compliant\n      - JH037A HP 5900AF 48XGT 4QSFP+ TAA-Compliant Switch\n      - JH038A HP 5900AF 48G 4XG 2QSFP+ TAA-Compliant\n  + **MSR1000 (Comware 7) - Version: R0305P08**\n    * HP Network Products\n      - JG875A HP MSR1002-4 AC Router\n      - JH060A HP MSR1003-8S AC Router\n  + **MSR2000 (Comware 7) - Version: R0305P08**\n    * HP Network Products\n      - JG411A HP MSR2003 AC Router\n      - JG734A HP MSR2004-24 AC Router\n      - JG735A HP MSR2004-48 Router\n      - JG866A HP MSR2003 TAA-compliant AC Router\n  + **MSR3000 (Comware 7) - Version: R0305P08**\n    * HP Network Products\n      - JG404A HP MSR3064 Router\n      - JG405A HP MSR3044 Router\n      - JG406A HP MSR3024 AC Router\n      - JG407A HP MSR3024 DC Router\n      - JG408A HP MSR3024 PoE Router\n      - JG409A HP MSR3012 AC Router\n      - JG410A HP MSR3012 DC Router\n      - JG861A HP MSR3024 TAA-compliant AC Router\n  + **MSR4000 (Comware 7) - Version: R0305P08**\n    * HP Network Products\n      - JG402A HP MSR4080 Router Chassis\n      - JG403A HP MSR4060 Router Chassis\n      - JG412A HP MSR4000 MPU-100 Main Processing Unit\n      - JG869A HP MSR4000 TAA-compliant MPU-100 Main Processing Unit\n  + **VSR (Comware 7) - Version: E0322**\n    * HP Network Products\n      - JG810AAE HP VSR1001 Virtual Services Router 60 Day Evaluation\nSoftware\n      - JG811AAE HP VSR1001 Comware 7 Virtual Services Router\n      - JG812AAE HP VSR1004 Comware 7 Virtual Services Router\n      - JG813AAE HP VSR1008 Comware 7 Virtual Services Router\n  + **7900 (Comware 7) - Version: R2138P03**\n    * HP Network Products\n      - JG682A HP FlexFabric 7904 Switch Chassis\n      - JG841A HP FlexFabric 7910 Switch Chassis\n      - JG842A HP FlexFabric 7910 7.2Tbps Fabric / Main Processing Unit\n      - JH001A HP FlexFabric 7910 2.4Tbps Fabric / Main Processing Unit\n      - JH122A HP FlexFabric 7904 TAA-compliant Switch Chassis\n      - JH123A HP FlexFabric 7910 TAA-compliant Switch Chassis\n      - JH124A HP FlexFabric 7910 7.2Tbps TAA-compliant Fabric/Main\nProcessing Unit\n      - JH125A HP FlexFabric 7910 2.4Tbps TAA-compliant Fabric/Main\nProcessing Unit\n  + **5130 (Comware 7) - Version: R3111P03**\n    * HP Network Products\n      - JG932A HP 5130-24G-4SFP+ EI Switch\n      - JG933A HP 5130-24G-SFP-4SFP+ EI Switch\n      - JG934A HP 5130-48G-4SFP+ EI Switch\n      - JG936A HP 5130-24G-PoE+-4SFP+ (370W) EI Switch\n      - JG937A HP 5130-48G-PoE+-4SFP+ (370W) EI Switch\n      - JG938A HP 5130-24G-2SFP+-2XGT EI Switch\n      - JG939A HP 5130-48G-2SFP+-2XGT EI Switch\n      - JG940A HP 5130-24G-PoE+-2SFP+-2XGT (370W) EI Switch\n      - JG941A HP 5130-48G-PoE+-2SFP+-2XGT (370W) EI Switch\n      - JG975A HP 5130-24G-4SFP+ EI Brazil Switch\n      - JG976A HP 5130-48G-4SFP+ EI Brazil Switch\n      - JG977A HP 5130-24G-PoE+-4SFP+ (370W) EI Brazil Switch\n      - JG978A HP 5130-48G-PoE+-4SFP+ (370W) EI Brazil Switch\n  + **5700 (Comware 7) - Version: R2422P02**\n    * HP Network Products\n      - JG894A HP FlexFabric 5700-48G-4XG-2QSFP+ Switch\n      - JG895A HP FlexFabric 5700-48G-4XG-2QSFP+ TAA-compliant Switch\n      - JG896A HP FlexFabric 5700-40XG-2QSFP+ Switch\n      - JG897A HP FlexFabric 5700-40XG-2QSFP+ TAA-compliant Switch\n      - JG898A HP FlexFabric 5700-32XGT-8XG-2QSFP+ Switch\n      - JG899A HP FlexFabric 5700-32XGT-8XG-2QSFP+ TAA-compliant Switch\n  + **5930 (Comware 7) - Version: R2422P02**\n    * HP Network Products\n      - JG726A HP FlexFabric 5930 32QSFP+ Switch\n      - JG727A HP FlexFabric 5930 32QSFP+ TAA-compliant Switch\n      - JH178A HP FlexFabric 5930 2QSFP+ 2-slot Switch\n      - JH179A HP FlexFabric 5930 4-slot Switch\n      - JH187A HP FlexFabric 5930 2QSFP+ 2-slot TAA-compliant Switch\n      - JH188A HP FlexFabric 5930 4-slot TAA-compliant Switch\n  + **HSR6600 (Comware 7) - Version: R7103P07**\n    * HP Network Products\n      - JG353A HP HSR6602-G Router\n      - JG354A HP HSR6602-XG Router\n      - JG776A HP HSR6602-G TAA-compliant Router\n      - JG777A HP HSR6602-XG TAA-compliant Router\n  + **HSR6800 (Comware 7) - Version: R7103P07**\n    * HP Network Products\n      - JG361A HP HSR6802 Router Chassis\n      - JG361B HP HSR6802 Router Chassis\n      - JG362A HP HSR6804 Router Chassis\n      - JG362B HP HSR6804 Router Chassis\n      - JG363A HP HSR6808 Router Chassis\n      - JG363B HP HSR6808 Router Chassis\n      - JG364A HP HSR6800 RSE-X2 Router Main Processing Unit\n      - JG779A HP HSR6800 RSE-X2 Router TAA-compliant Main Processing\n      - JH075A HP HSR6800 RSE-X3 Router Main Processing Unit\n  + **1950 (Comware 7) - Version: R3111P03**\n    * HP Network Products\n      - JG960A HP 1950-24G-4XG Switch\n      - JG961A HP 1950-48G-2SFP+-2XGT Switch\n      - JG962A HP 1950-24G-2SFP+-2XGT-PoE+(370W) Switch\n      - JG963A HP 1950-48G-2SFP+-2XGT-PoE+(370W) Switch\n  + **7500 (Comware 7) - Version: R7178**\n    * HP Network Products\n      - JD238C HP 7510 Switch Chassis\n      - JD239C HP 7506 Switch Chassis\n      - JD240C HP 7503 Switch Chassis\n      - JD242C HP 7502 Switch Chassis\n      - JH207A HP 7500 1.2Tbps Fabric with 2-port 40GbE QSFP+ for IRF-Only\nMain Processing Unit\n      - JH208A HP 7502 Main Processing Unit\n      - JH209A HP 7500 2.4Tbps Fabric with 8-port 1/10GbE SFP+ and 2-port\n40GbE QSFP+ Main Processing Unit\n  + **5130HI - Version: R1118P02**\n    * HP Network Products\n      - JH323A HPE 5130 24G 4SFP+ 1-slot HI Switch\n      - JH324A HPE 5130 48G 4SFP+ 1-slot HI Switch\n      - JH325A HPE 5130 24G PoE+ 4SFP+ 1-slot HI Switch\n      - JH326A HPE 5130 48G PoE+ 4SFP+ 1-slot HI Switch\n  + **5510HI - Version: R1118P02**\n    * HP Network Products\n      - JH145A HPE 5510 24G 4SFP+ HI 1-slot Switch\n      - JH146A HPE 5510 48G 4SFP+ HI 1-slot Switch\n      - JH147A HPE 5510 24G PoE+ 4SFP+ HI 1-slot Switch\n      - JH148A HPE 5510 48G PoE+ 4SFP+ HI 1-slot Switch\n      - JH149A HPE 5510 24G SFP 4SFP+ HI 1-slot Switch\n\n**Note:** Please contact HPE Technical Support if any assistance is needed\nacquiring the software updates. \n\nHISTORY\nVersion:1 (rev.1) - 21 September 2016 Initial release\n\nThird Party Security Patches: Third party security patches that are to be\ninstalled on systems running Hewlett Packard Enterprise (HPE) software\nproducts should be applied in accordance with the customer\u0027s patch management\npolicy. \n\nSupport: For issues about implementing the recommendations of this Security\nBulletin, contact normal HPE Services support channel. For other issues about\nthe content of this Security Bulletin, send e-mail to security-alert@hpe.com. \n\nReport: To report a potential security vulnerability for any HPE supported\nproduct:\n  Web form: https://www.hpe.com/info/report-security-vulnerability\n  Email: security-alert@hpe.com\n\nSubscribe: To initiate a subscription to receive future HPE Security Bulletin\nalerts via Email: http://www.hpe.com/support/Subscriber_Choice\n\nSecurity Bulletin Archive: A list of recently released Security Bulletins is\navailable here: http://www.hpe.com/support/Security_Bulletin_Archive\n\nSoftware Product Category: The Software Product Category is represented in\nthe title by the two characters following HPSB. \n\n3C = 3COM\n3P = 3rd Party Software\nGN = HPE General Software\nHF = HPE Hardware and Firmware\nMU = Multi-Platform Software\nNS = NonStop Servers\nOV = OpenVMS\nPV = ProCurve\nST = Storage Software\nUX = HP-UX\n\nCopyright 2016 Hewlett Packard Enterprise\n\nHewlett Packard Enterprise shall not be liable for technical or editorial\nerrors or omissions contained herein. The information provided is provided\n\"as is\" without warranty of any kind. To the extent permitted by law, neither\nHP or its affiliates, subcontractors or suppliers will be liable for\nincidental,special or consequential damages including downtime cost; lost\nprofits; damages relating to the procurement of substitute products or\nservices; or damages for loss of data, or software restoration. The\ninformation in this document is subject to change without notice. Hewlett\nPackard Enterprise and the names of Hewlett Packard Enterprise products\nreferenced herein are trademarks of Hewlett Packard Enterprise in the United\nStates and other countries. Other product and company names mentioned herein\nmay be trademarks of their respective owners. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=============================================================================\nFreeBSD-SA-15:25.ntp                                        Security Advisory\n                                                          The FreeBSD Project\n\nTopic:          Multiple vulnerabilities of ntp\n\nCategory:       contrib\nModule:         ntp\nAnnounced:      2015-10-26\nCredits:        Network Time Foundation\nAffects:        All supported versions of FreeBSD. \nCorrected:      2015-10-26 11:35:40 UTC (stable/10, 10.2-STABLE)\n                2015-10-26 11:36:55 UTC (releng/10.2, 10.2-RELEASE-p6)\n                2015-10-26 11:37:31 UTC (releng/10.1, 10.1-RELEASE-p23)\n                2015-10-26 11:36:40 UTC (stable/9, 9.3-STABLE)\n                2015-10-26 11:42:25 UTC (releng/9.3, 9.3-RELEASE-p29)\nCVE Name:       CVE-2015-7701, CVE-2015-7702, CVE-2015-7703, CVE-2015-7704,\n                CVE-2015-7848, CVE-2015-7849, CVE-2015-7850, CVE-2015-7851,\n                CVE-2015-7852, CVE-2015-7853, CVE-2015-7854, CVE-2015-7855,\n                CVE-2015-7871\n\nFor general information regarding FreeBSD Security Advisories,\nincluding descriptions of the fields above, security branches, and the\nfollowing sections, please visit https://security.FreeBSD.org/. \n\nI. \n\nII.  Problem Description\n\nCrypto-NAK packets can be used to cause ntpd(8) to accept time from an\nunauthenticated ephemeral symmetric peer by bypassing the authentication\nrequired to mobilize peer associations. [CVE-2015-7871] FreeBSD 9.3 and\n10.1 are not affected. \n\nIf ntpd(8) is fed a crafted mode 6 or mode 7 packet containing an unusual\nlong data value where a network address is expected, the decodenetnum()\nfunction will abort with an assertion failure instead of simply returning\na failure condition. [CVE-2015-7855]\n\nIf ntpd(8) is configured to allow remote configuration, and if the\n(possibly spoofed) source IP address is allowed to send remote\nconfiguration requests, and if the attacker knows the remote\nconfiguration password or if ntpd(8) was configured to disable\nauthentication, then an attacker can send a set of packets to ntpd(8) that\nmay cause it to crash, with the hypothetical possibility of a small code\ninjection. [CVE-2015-7854]\n\nA negative value for the datalen parameter will overflow a data buffer. \nNTF\u0027s ntpd(8) driver implementations always set this value to 0 and are\ntherefore not vulnerable to this weakness. If you are running a custom\nrefclock driver in ntpd(8) and that driver supplies a negative value for\ndatalen (no custom driver of even minimal competence would do this)\nthen ntpd would overflow a data buffer. It is even hypothetically\npossible in this case that instead of simply crashing ntpd the\nattacker could effect a code injection attack. [CVE-2015-7853]\n\nIf an attacker can figure out the precise moment that ntpq(8) is listening\nfor data and the port number it is listening on or if the attacker can\nprovide a malicious instance ntpd(8) that victims will connect to then an\nattacker can send a set of crafted mode 6 response packets that, if\nreceived by ntpq(8), can cause ntpq(8) to crash. [CVE-2015-7852]\n\nIf ntpd(8) is configured to allow remote configuration, and if the\n(possibly spoofed) IP address is allowed to send remote configuration\nrequests, and if the attacker knows the remote configuration password\nor if ntpd(8) was configured to disable authentication, then an attacker\ncan send a set of packets to ntpd that may cause ntpd(8) to overwrite\nfiles. [CVE-2015-7851].  The default configuration of ntpd(8) within\nFreeBSD does not allow remote configuration. \n\nIf ntpd(8) is configured to allow remote configuration, and if the\n(possibly spoofed) source IP address is allowed to send remote\nconfiguration requests, and if the attacker knows the remote\nconfiguration password or if ntpd(8) was configured to disable\nauthentication, then an attacker can send a set of packets to ntpd\nthat will cause it to crash and/or create a potentially huge log\nfile.  Specifically, the attacker could enable extended logging,\npoint the key file at the log file, and cause what amounts to an\ninfinite loop. [CVE-2015-7850].  The default configuration of ntpd(8)\nwithin FreeBSD does not allow remote configuration. \n\nIf ntpd(8) is configured to allow remote configuration, and if the\n(possibly spoofed) source IP address is allowed to send remote\nconfiguration requests, and if the attacker knows the remote\nconfiguration password or if ntpd was configured to disable\nauthentication, then an attacker can send a set of packets to\nntpd that may cause a crash or theoretically perform a code\ninjection attack. [CVE-2015-7849].  The default configuration of ntpd(8)\nwithin FreeBSD does not allow remote configuration. \n\nIf ntpd(8) is configured to enable mode 7 packets, and if the use\nof mode 7 packets is not properly protected thru the use of the\navailable mode 7 authentication and restriction mechanisms, and\nif the (possibly spoofed) source IP address is allowed to send\nmode 7 queries, then an attacker can send a crafted packet to\nntpd that will cause it to crash. [CVE-2015-7848].  The default\nconfiguration of ntpd(8) within FreeBSD does not allow mode 7\npackets. \n\nIf ntpd(8) is configured to use autokey, then an attacker can send\npackets to ntpd that will, after several days of ongoing attack,\ncause it to run out of memory. [CVE-2015-7701].  The default\nconfiguration of ntpd(8) within FreeBSD does not use autokey. \n\nIf ntpd(8) is configured to allow for remote configuration, and if\nthe (possibly spoofed) source IP address is allowed to send\nremote configuration requests, and if the attacker knows the\nremote configuration password, it\u0027s possible for an attacker\nto use the \"pidfile\" or \"driftfile\" directives to potentially\noverwrite other files. [CVE-2015-5196].  The default configuration\nof ntpd(8) within FreeBSD does not allow remote configuration\n\nAn ntpd(8) client that honors Kiss-of-Death responses will honor\nKoD messages that have been forged by an attacker, causing it\nto delay or stop querying its servers for time updates. Also,\nan attacker can forge packets that claim to be from the target\nand send them to servers often enough that a server that\nimplements KoD rate limiting will send the target machine a\nKoD response to attempt to reduce the rate of incoming packets,\nor it may also trigger a firewall block at the server for\npackets from the target machine. For either of these attacks\nto succeed, the attacker must know what servers the target\nis communicating with. An attacker can be anywhere on the\nInternet and can frequently learn the identity of the target\u0027s\ntime source by sending the target a time query. [CVE-2015-7704]\n\nThe fix for CVE-2014-9750 was incomplete in that there were\ncertain code paths where a packet with particular autokey\noperations that contained malicious data was not always being\ncompletely validated. Receipt of these packets can cause ntpd\nto crash. [CVE-2015-7702].  The default configuration of ntpd(8)\nwithin FreeBSD does not use autokey. \n\nIII. Impact\n\nAn attacker which can send NTP packets to ntpd(8), which uses cryptographic\nauthentication of NTP data, may be able to inject malicious time data\ncausing the system clock to be set incorrectly. [CVE-2015-7871]\n\nAn attacker which can send NTP packets to ntpd(8), can block the\ncommunication of the daemon with time servers, causing the system\nclock not being synchronized. [CVE-2015-7704]\n\nAn attacker which can send NTP packets to ntpd(8), can remotely crash\nthe daemon, sending malicious data packet. [CVE-2015-7855] [CVE-2015-7854]\n[CVE-2015-7853] [CVE-2015-7852] [CVE-2015-7849] [CVE-2015-7848]\n\nAn attacker which can send NTP packets to ntpd(8), can remotely\ntrigger the daemon to overwrite its configuration files. [CVE-2015-7851]\n[CVE-2015-5196]\n\nIV.  Workaround\n\nNo workaround is available, but systems not running ntpd(8) are not\naffected.  Network administrators are advised to implement BCP-38,\nwhich helps to reduce risk associated with the attacks. \n\nV.   Solution\n\nPerform one of the following:\n\n1) Upgrade your vulnerable system to a supported FreeBSD stable or\nrelease / security branch (releng) dated after the correction date. \n\nThe ntpd service has to be restarted after the update.  A reboot is\nrecommended but not required. \n\n2) To update your vulnerable system via a binary patch:\n\nSystems running a RELEASE version of FreeBSD on the i386 or amd64\nplatforms can be updated via the freebsd-update(8) utility:\n\n# freebsd-update fetch\n# freebsd-update install\n\nThe ntpd service has to be restarted after the update.  A reboot is\nrecommended but not required. \n\n3) To update your vulnerable system via a source code patch:\n\nThe following patches have been verified to apply to the applicable\nFreeBSD release branches. \n\na) Download the relevant patch from the location below, and verify the\ndetached PGP signature using your PGP utility. \n\n[FreeBSD 10.2]\n# fetch https://security.FreeBSD.org/patches/SA-15:25/ntp-102.patch.bz2\n# bunzip2 ntp-102.patch.bz2\n# fetch https://security.FreeBSD.org/patches/SA-15:25/ntp-102.patch.asc\n# gpg --verify ntp-102.patch.asc\n\n[FreeBSD 10.1]\n# fetch https://security.FreeBSD.org/patches/SA-15:25/ntp-101.patch.bz2\n# bunzip2 ntp-101.patch.bz2\n# fetch https://security.FreeBSD.org/patches/SA-15:25/ntp-101.patch.asc\n# gpg --verify ntp-101.patch.asc\n\n[FreeBSD 9.3]\n# fetch https://security.FreeBSD.org/patches/SA-15:25/ntp-93.patch.bz2\n# bunzip2 ntp-93.patch.bz2\n# fetch https://security.FreeBSD.org/patches/SA-15:25/ntp-93.patch.asc\n# gpg --verify ntp-93.patch.asc\n\nb) Apply the patch.  Execute the following commands as root:\n\n# cd /usr/src\n# patch \u003c /path/to/patch\n# find contrib/ntp -type f -empty -delete\n\nc) Recompile the operating system using buildworld and installworld as\ndescribed in https://www.FreeBSD.org/handbook/makeworld.html. \n\nd) For 9.3-RELEASE and 10.1-RELEASE an update to /etc/ntp.conf is recommended,\nwhich can be done with help of the mergemaster(8) tool on 9.3-RELEASE and\nwith help of the etcupdate(8) tool on 10.1-RELEASE. \n\nRestart the ntpd(8) daemon, or reboot the system. \n\nVI.  Correction details\n\nThe following list contains the correction revision numbers for each\naffected branch. \n\nBranch/path                                                      Revision\n- -------------------------------------------------------------------------\nstable/9/                                                         r289998\nreleng/9.3/                                                       r290001\nstable/10/                                                        r289997\nreleng/10.1/                                                      r290000\nreleng/10.2/                                                      r289999\n- -------------------------------------------------------------------------\n\nTo see which files were modified by a particular revision, run the\nfollowing command, replacing NNNNNN with the revision number, on a\nmachine with Subversion installed:\n\n# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base\n\nOr visit the following URL, replacing NNNNNN with the revision number:\n\nhttps://svnweb.freebsd.org/base?view=revision\u0026revision=NNNNNN\n\nVII. References\n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7701\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7702\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7703\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7704\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7848\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7849\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7850\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7851\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7852\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7853\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7854\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7855\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7871\n\nThe latest revision of this advisory is available at\nhttps://security.FreeBSD.org/advisories/FreeBSD-SA-15:25.ntp.asc\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\nEUlBT3ViDhHNrI7PTaiI\n=djPm\n-----END PGP SIGNATURE-----\n. From: Yury German \u003cblueknight@gentoo.org\u003e\nTo: gentoo-announce@lists.gentoo.org\nMessage-ID: \u003c57035F2D.8090108@gentoo.org\u003e\nSubject: [ GLSA 201604-03 ] Xen: Multiple vulnerabilities\n\n\n\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory                           GLSA 201604-03\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n                                           https://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n    Title: Xen: Multiple vulnerabilities\n     Date: April 05, 2016\n     Bugs: #445254, #513832, #547202, #549200, #549950, #550658,\n           #553664, #553718, #555532, #556304, #561110, #564472,\n           #564932, #566798, #566838, #566842, #567962, #571552,\n           #571556, #574012\n       ID: 201604-03\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in Xen, the worst of which\ncause a Denial of Service. \n\nBackground\n==========\n\nXen is a bare-metal hypervisor. \n\nAffected packages\n=================\n\n    -------------------------------------------------------------------\n     Package              /     Vulnerable     /            Unaffected\n    -------------------------------------------------------------------\n  1  app-emulation/xen           \u003c 4.6.0-r9               \u003e= 4.6.0-r9\n                                                         *\u003e= 4.5.2-r5\n  2  app-emulation/xen-pvgrub\n                                  \u003c 4.6.0                  Vulnerable!\n  3  app-emulation/xen-tools     \u003c 4.6.0-r9               \u003e= 4.6.0-r9\n                                                         *\u003e= 4.5.2-r5\n  4  app-emulation/pvgrub                                    \u003e= 4.6.0\n                                                            *\u003e= 4.5.2\n    -------------------------------------------------------------------\n     NOTE: Certain packages are still vulnerable. Users should migrate\n           to another package if one is available or wait for the\n           existing packages to be marked stable by their\n           architecture maintainers. \n    -------------------------------------------------------------------\n     4 affected packages\n\nDescription\n===========\n\nMultiple vulnerabilities have been discovered in Xen. Please review the\nCVE identifiers referenced below for details. \n\nResolution\n==========\n\nAll Xen 4.5 users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot --verbose \"\u003e=app-emulation/xen-4.5.2-r5\"\n\nAll Xen 4.6 users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot --verbose \"\u003e=app-emulation/xen-4.6.0-r9\"\n\nAll Xen tools 4.5 users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot -v \"\u003e=app-emulation/xen-tools-4.5.2-r5\"\n\nAll Xen tools 4.6 users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot -v \"\u003e=app-emulation/xen-tools-4.6.0-r9\"\n\nAll Xen pvgrub users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot --verbose \"\u003e=app-emulation/xen-pvgrub-4.6.0\"=\n\n\nReferences\n==========\n\n[  1 ] CVE-2012-3494\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3494\n[  2 ] CVE-2012-3495\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3495\n[  3 ] CVE-2012-3496\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3496\n[  4 ] CVE-2012-3497\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3497\n[  5 ] CVE-2012-3498\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3498\n[  6 ] CVE-2012-3515\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-3515\n[  7 ] CVE-2012-4411\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4411\n[  8 ] CVE-2012-4535\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4535\n[  9 ] CVE-2012-4536\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4536\n[ 10 ] CVE-2012-4537\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4537\n[ 11 ] CVE-2012-4538\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4538\n[ 12 ] CVE-2012-4539\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4539\n[ 13 ] CVE-2012-6030\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-6030\n[ 14 ] CVE-2012-6031\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-6031\n[ 15 ] CVE-2012-6032\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-6032\n[ 16 ] CVE-2012-6033\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-6033\n[ 17 ] CVE-2012-6034\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-6034\n[ 18 ] CVE-2012-6035\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-6035\n[ 19 ] CVE-2012-6036\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-6036\n[ 20 ] CVE-2015-2151\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-2151\n[ 21 ] CVE-2015-3209\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3209\n[ 22 ] CVE-2015-3259\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3259\n[ 23 ] CVE-2015-3340\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3340\n[ 24 ] CVE-2015-3456\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3456\n[ 25 ] CVE-2015-4103\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-4103\n[ 26 ] CVE-2015-4104\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-4104\n[ 27 ] CVE-2015-4105\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-4105\n[ 28 ] CVE-2015-4106\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-4106\n[ 29 ] CVE-2015-4163\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-4163\n[ 30 ] CVE-2015-4164\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-4164\n[ 31 ] CVE-2015-5154\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5154\n[ 32 ] CVE-2015-7311\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7311\n[ 33 ] CVE-2015-7504\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7504\n[ 34 ] CVE-2015-7812\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7812\n[ 35 ] CVE-2015-7813\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7813\n[ 36 ] CVE-2015-7814\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7814\n[ 37 ] CVE-2015-7835\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7835\n[ 38 ] CVE-2015-7871\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7871\n[ 39 ] CVE-2015-7969\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7969\n[ 40 ] CVE-2015-7970\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7970\n[ 41 ] CVE-2015-7971\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7971\n[ 42 ] CVE-2015-7972\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-7972\n[ 43 ] CVE-2015-8339\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8339\n[ 44 ] CVE-2015-8340\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8340\n[ 45 ] CVE-2015-8341\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8341\n[ 46 ] CVE-2015-8550\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8550\n[ 47 ] CVE-2015-8551\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8551\n[ 48 ] CVE-2015-8552\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8552\n[ 49 ] CVE-2015-8554\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8554\n[ 50 ] CVE-2015-8555\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8555\n[ 51 ] CVE-2016-2270\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2270\n[ 52 ] CVE-2016-2271\n       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2271\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/201604-03\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2016 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n\n\n\n--roWGDR0oQEDLX1s6lNAQV7ISgI2Pjo8Pc\n. ============================================================================\nUbuntu Security Notice USN-2783-1\nOctober 27, 2015\n\nntp vulnerabilities\n============================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 15.10\n- Ubuntu 15.04\n- Ubuntu 14.04 LTS\n- Ubuntu 12.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in NTP. (CVE-2015-5146)\n\nMiroslav Lichvar discovered that NTP incorrectly handled logconfig\ndirectives. (CVE-2015-5194)\n\nMiroslav Lichvar discovered that NTP incorrectly handled certain statistics\ntypes. (CVE-2015-5195)\n\nMiroslav Lichvar discovered that NTP incorrectly handled certain file\npaths. (CVE-2015-5196, CVE-2015-7703)\n\nMiroslav Lichvar discovered that NTP incorrectly handled certain packets. (CVE-2015-5219)\n\nAanchal Malhotra, Isaac E. Cohen, and Sharon Goldberg discovered that NTP\nincorrectly handled restarting after hitting a panic threshold. \n(CVE-2015-7691, CVE-2015-7692, CVE-2015-7702)\n\nIt was discovered that NTP incorrectly handled memory when processing\ncertain autokey messages. \n(CVE-2015-7701)\n\nAanchal Malhotra, Isaac E. Cohen, and Sharon Goldberg discovered that NTP\nincorrectly handled rate limiting. A remote attacker could possibly use\nthis issue to cause clients to stop updating their clock. (CVE-2015-7704,\nCVE-2015-7705)\n\nYves Younan discovered that NTP incorrectly handled logfile and keyfile\ndirectives. (CVE-2015-7850)\n\nYves Younan and Aleksander Nikolich discovered that NTP incorrectly handled\nascii conversion. (CVE-2015-7852)\n\nYves Younan discovered that NTP incorrectly handled reference clock memory. \nA malicious refclock could possibly use this issue to cause NTP to crash,\nresulting in a denial of service, or possibly execute arbitrary code. \n(CVE-2015-7853)\n\nJohn D \"Doug\" Birdwell discovered that NTP incorrectly handled decoding\ncertain bogus values. (CVE-2015-7855)\n\nStephen Gray discovered that NTP incorrectly handled symmetric association\nauthentication. (CVE-2015-7871)\n\nIn the default installation, attackers would be isolated by the NTP\nAppArmor profile. \n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 15.10:\n  ntp                             1:4.2.6.p5+dfsg-3ubuntu8.1\n\nUbuntu 15.04:\n  ntp                             1:4.2.6.p5+dfsg-3ubuntu6.2\n\nUbuntu 14.04 LTS:\n  ntp                             1:4.2.6.p5+dfsg-3ubuntu2.14.04.5\n\nUbuntu 12.04 LTS:\n  ntp                             1:4.2.6.p3+dfsg-1ubuntu3.6\n\nIn general, a standard system update will make all the necessary changes. \n\nReferences:\n  http://www.ubuntu.com/usn/usn-2783-1\n  CVE-2015-5146, CVE-2015-5194, CVE-2015-5195, CVE-2015-5196,\n  CVE-2015-5219, CVE-2015-5300, CVE-2015-7691, CVE-2015-7692,\n  CVE-2015-7701, CVE-2015-7702, CVE-2015-7703, CVE-2015-7704,\n  CVE-2015-7705, CVE-2015-7850, CVE-2015-7852, CVE-2015-7853,\n  CVE-2015-7855, CVE-2015-7871\n\nPackage Information:\n  https://launchpad.net/ubuntu/+source/ntp/1:4.2.6.p5+dfsg-3ubuntu8.1\n  https://launchpad.net/ubuntu/+source/ntp/1:4.2.6.p5+dfsg-3ubuntu6.2\n  https://launchpad.net/ubuntu/+source/ntp/1:4.2.6.p5+dfsg-3ubuntu2.14.04.5\n  https://launchpad.net/ubuntu/+source/ntp/1:4.2.6.p3+dfsg-1ubuntu3.6\n. \n\nOn October 21st, 2015, NTP.org released a security advisory detailing 13 issues regarding multiple DoS vulnerabilities, information disclosure vulnerabilities, and logic issues that may result in an attacker gaining the ability to modify an NTP server\u0027s advertised time. \n\nWorkarounds that mitigate one or more of the vulnerabilities may be available for certain products, please see the individual Cisco Bug IDs for details. \n\nCVE-2015-5194\n\n    It was found that ntpd could crash due to an uninitialized\n    variable when processing malformed logconfig configuration\n    commands. \n\nCVE-2015-5195\n\n    It was found that ntpd exits with a segmentation fault when a\n    statistics type that was not enabled during compilation (e.g. \n    timingstats) is referenced by the statistics or filegen\n    configuration command\n\nCVE-2015-5219\n\n    It was discovered that sntp program would hang in an infinite loop\n    when a crafted NTP packet was received, related to the conversion\n    of the precision value in the packet to double. \n\nCVE-2015-5300\n\n    It was found that ntpd did not correctly implement the -g option:\n\n    Normally, ntpd exits with a message to the system log if the offset\n    exceeds the panic threshold, which is 1000 s by default. This\n    option allows the time to be set to any value without restriction;\n    however, this can happen only once. If the threshold is exceeded\n    after that, ntpd will exit with a message to the system log. This\n    option can be used with the -q and -x options. \n\n    ntpd could actually step the clock multiple times by more than the\n    panic threshold if its clock discipline doesn\u0027t have enough time to\n    reach the sync state and stay there for at least one update. If a\n    man-in-the-middle attacker can control the NTP traffic since ntpd\n    was started (or maybe up to 15-30 minutes after that), they can\n    prevent the client from reaching the sync state and force it to step\n    its clock by any amount any number of times, which can be used by\n    attackers to expire certificates, etc. \n\n    This is contrary to what the documentation says. Normally, the\n    assumption is that an MITM attacker can step the clock more than the\n    panic threshold only once when ntpd starts and to make a larger\n    adjustment the attacker has to divide it into multiple smaller\n    steps, each taking 15 minutes, which is slow. \n\nCVE-2015-7701\n\n    A memory leak flaw was found in ntpd\u0027s CRYPTO_ASSOC. \n\nCVE-2015-7703\n\n    Miroslav Lichvar of Red Hat found that the :config command can be\n    used to set the pidfile and driftfile paths without any\n    restrictions. A remote attacker could use this flaw to overwrite a\n    file on the file system with a file containing the pid of the ntpd\n    process (immediately) or the current estimated drift of the system\n    clock (in hourly intervals). For example:\n\n    ntpq -c \u0027:config pidfile /tmp/ntp.pid\u0027\n    ntpq -c \u0027:config driftfile /tmp/ntp.drift\u0027\n\n    In Debian ntpd is configured to drop root privileges, which limits\n    the impact of this issue. \n\nCVE-2015-7704\n\n    If ntpd as an NTP client receives a Kiss-of-Death (KoD) packet\n    from the server to reduce its polling rate, it doesn\u0027t check if the\n    originate timestamp in the reply matches the transmit timestamp from\n    its request. An off-path attacker can send a crafted KoD packet to\n    the client, which will increase the client\u0027s polling interval to a\n    large value and effectively disable synchronization with the server. A\n    specially crafted configuration file could cause an endless loop\n    resulting in a denial of service. \n\nCVE-2015-7852\n\n    A potential off by one vulnerability exists in the cookedprint\n    functionality of ntpq. A specially crafted buffer could cause a\n    buffer overflow potentially resulting in null byte being written out\n    of bounds. \n\nCVE-2015-7871\n\n    An error handling logic error exists within ntpd that manifests due\n    to improper error condition handling associated with certain\n    crypto-NAK packets. An unauthenticated, off-path attacker can force\n    ntpd processes on targeted servers to peer with time sources of the\n    attacker\u0027s choosing by transmitting symmetric active crypto-NAK\n    packets to ntpd. \n\nFor the oldstable distribution (wheezy), these problems have been fixed\nin version 1:4.2.6.p5+dfsg-2+deb7u6. \n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 1:4.2.6.p5+dfsg-7+deb8u1. \n\nFor the testing distribution (stretch), these problems have been fixed\nin version 1:4.2.8p4+dfsg-3. \n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 1:4.2.8p4+dfsg-3. \n\nWe recommend that you upgrade your ntp packages. \n\n\nHere are the details from the Slackware 14.1 ChangeLog:\n+--------------------------+\npatches/packages/ntp-4.2.8p4-i486-1_slack14.1.txz:  Upgraded. \n  In addition to bug fixes and enhancements, this release fixes\n  several low and medium severity vulnerabilities. \n  For more information, see:\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9750\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5196\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7691\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7692\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7701\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7702\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7704\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7705\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7848\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7849\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7850\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7851\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7852\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7853\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7854\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7855\n    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7871\n  (* Security fix *)\n+--------------------------+\n\n\nWhere to find the new packages:\n+-----------------------------+\n\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project!  :-)\n\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you. \n\nUpdated package for Slackware 13.0:\nftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ntp-4.2.8p4-i486-1_slack13.0.txz\n\nUpdated package for Slackware x86_64 13.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/ntp-4.2.8p4-x86_64-1_slack13.0.txz\n\nUpdated package for Slackware 13.1:\nftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ntp-4.2.8p4-i486-1_slack13.1.txz\n\nUpdated package for Slackware x86_64 13.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/ntp-4.2.8p4-x86_64-1_slack13.1.txz\n\nUpdated package for Slackware 13.37:\nftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/ntp-4.2.8p4-i486-1_slack13.37.txz\n\nUpdated package for Slackware x86_64 13.37:\nftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/ntp-4.2.8p4-x86_64-1_slack13.37.txz\n\nUpdated package for Slackware 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/ntp-4.2.8p4-i486-1_slack14.0.txz\n\nUpdated package for Slackware x86_64 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/ntp-4.2.8p4-x86_64-1_slack14.0.txz\n\nUpdated package for Slackware 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/ntp-4.2.8p4-i486-1_slack14.1.txz\n\nUpdated package for Slackware x86_64 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/ntp-4.2.8p4-x86_64-1_slack14.1.txz\n\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/ntp-4.2.8p4-i586-1.txz\n\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/ntp-4.2.8p4-x86_64-1.txz\n\n\nMD5 signatures:\n+-------------+\n\nSlackware 13.0 package:\n21dd14178fea17a88c9326c8672ecefd  ntp-4.2.8p4-i486-1_slack13.0.txz\n\nSlackware x86_64 13.0 package:\n8647479b2007b92ff8598184f2275263  ntp-4.2.8p4-x86_64-1_slack13.0.txz\n\nSlackware 13.1 package:\ne0f122e8e271dc84db06202c03cc0288  ntp-4.2.8p4-i486-1_slack13.1.txz\n\nSlackware x86_64 13.1 package:\ndb0aff04b72b3d8c96ca8c8e1ed36c05  ntp-4.2.8p4-x86_64-1_slack13.1.txz\n\nSlackware 13.37 package:\n5914e43e886e5ff88fefd30083493e30  ntp-4.2.8p4-i486-1_slack13.37.txz\n\nSlackware x86_64 13.37 package:\n4335c3bf2ae24afc5ad734e8d80b3e94  ntp-4.2.8p4-x86_64-1_slack13.37.txz\n\nSlackware 14.0 package:\n39b05698797b638b67130e0b170e0a4b  ntp-4.2.8p4-i486-1_slack14.0.txz\n\nSlackware x86_64 14.0 package:\ndcf4a56ba1d013ee1c9d0e624e158709  ntp-4.2.8p4-x86_64-1_slack14.0.txz\n\nSlackware 14.1 package:\n1fd3a7beaf23303e2c211af377662614  ntp-4.2.8p4-i486-1_slack14.1.txz\n\nSlackware x86_64 14.1 package:\n438c3185aa8ec20d1c2b5e51786e4d41  ntp-4.2.8p4-x86_64-1_slack14.1.txz\n\nSlackware -current package:\n81bfb2fed450cb26a51b5e1cee0d33ed  n/ntp-4.2.8p4-i586-1.txz\n\nSlackware x86_64 -current package:\n8bae4ad633af40d4d54b7686e4b225f9  n/ntp-4.2.8p4-x86_64-1.txz\n\n\nInstallation instructions:\n+------------------------+\n\nUpgrade the package as root:\n# upgradepkg ntp-4.2.8p4-i486-1_slack14.1.txz\n\nThen, restart the NTP daemon:\n\n# sh /etc/rc.d/rc.ntpd restart\n\n\n+-----+\n\nSlackware Linux Security Team\nhttp://slackware.com/gpg-key\nsecurity@slackware.com\n\n+------------------------------------------------------------------------+\n| To leave the slackware-security mailing list:                          |\n+------------------------------------------------------------------------+\n| Send an email to majordomo@slackware.com with this text in the body of |\n| the email message:                                                     |\n|                                                                        |\n|   unsubscribe slackware-security                                       |\n|                                                                        |\n| You will get a confirmation message back containing instructions to    |\n| complete the process.  Please do not reply to this email address",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-7871"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      },
      {
        "db": "BID",
        "id": "77287"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-7871"
      },
      {
        "db": "PACKETSTORM",
        "id": "137992"
      },
      {
        "db": "PACKETSTORM",
        "id": "138803"
      },
      {
        "db": "PACKETSTORM",
        "id": "134082"
      },
      {
        "db": "PACKETSTORM",
        "id": "136587"
      },
      {
        "db": "PACKETSTORM",
        "id": "134102"
      },
      {
        "db": "PACKETSTORM",
        "id": "134034"
      },
      {
        "db": "PACKETSTORM",
        "id": "134162"
      },
      {
        "db": "PACKETSTORM",
        "id": "134137"
      }
    ],
    "trust": 2.7
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2015-7871",
        "trust": 3.6
      },
      {
        "db": "BID",
        "id": "77287",
        "trust": 2.0
      },
      {
        "db": "SECTRACK",
        "id": "1033951",
        "trust": 1.7
      },
      {
        "db": "SIEMENS",
        "id": "SSA-497656",
        "trust": 1.7
      },
      {
        "db": "JVN",
        "id": "JVNVU96269392",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007708",
        "trust": 0.8
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-21-103-11",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-574",
        "trust": 0.6
      },
      {
        "db": "JUNIPER",
        "id": "JSA10711",
        "trust": 0.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-17-094-04",
        "trust": 0.3
      },
      {
        "db": "TALOS",
        "id": "TALOS-2015-0069",
        "trust": 0.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-15-356-01",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-7871",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "137992",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "138803",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "134082",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "136587",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "134102",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "134034",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "134162",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "134137",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2015-7871"
      },
      {
        "db": "BID",
        "id": "77287"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      },
      {
        "db": "PACKETSTORM",
        "id": "137992"
      },
      {
        "db": "PACKETSTORM",
        "id": "138803"
      },
      {
        "db": "PACKETSTORM",
        "id": "134082"
      },
      {
        "db": "PACKETSTORM",
        "id": "136587"
      },
      {
        "db": "PACKETSTORM",
        "id": "134102"
      },
      {
        "db": "PACKETSTORM",
        "id": "134034"
      },
      {
        "db": "PACKETSTORM",
        "id": "134162"
      },
      {
        "db": "PACKETSTORM",
        "id": "134137"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-574"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7871"
      }
    ]
  },
  "id": "VAR-201708-0039",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.17692308
  },
  "last_update_date": "2024-07-23T19:28:52.202000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Bug\u00a01274265",
        "trust": 0.8,
        "url": "http://support.ntp.org/bin/view/main/ntpbug2941"
      },
      {
        "title": "NTP Fixes for authentication bypassing vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=119786"
      },
      {
        "title": "Red Hat: CVE-2015-7871",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2015-7871"
      },
      {
        "title": "Amazon Linux AMI: ALAS-2015-607",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=alas-2015-607"
      },
      {
        "title": "Ubuntu Security Notice: ntp vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-2783-1"
      },
      {
        "title": "Siemens Security Advisories: Siemens Security Advisory",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories\u0026qid=e70fe4cd19746222a97e5da53d3d2b2a"
      },
      {
        "title": "Debian Security Advisories: DSA-3388-1 ntp -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=61fe4252a877d02aaea1c931efa0a305"
      },
      {
        "title": "Symantec Security Advisories: SA103 : October 2015 NTP Security Vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=symantec_security_advisories\u0026qid=f5e05389a60d3a56f2a0ad0ec21579d9"
      },
      {
        "title": "Cisco: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts\u0026qid=cisco-sa-20151021-ntp"
      },
      {
        "title": "Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - January 2016",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins\u0026qid=eb439566c9130adc92d21bc093204cf8"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2015-7871"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-574"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-287",
        "trust": 1.0
      },
      {
        "problemtype": "Improper authentication (CWE-287) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7871"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.0,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1274265"
      },
      {
        "trust": 1.8,
        "url": "http://www.securityfocus.com/bid/77287"
      },
      {
        "trust": 1.8,
        "url": "https://security.gentoo.org/glsa/201607-15"
      },
      {
        "trust": 1.8,
        "url": "https://security.gentoo.org/glsa/201604-03"
      },
      {
        "trust": 1.7,
        "url": "http://support.ntp.org/bin/view/main/ntpbug2941"
      },
      {
        "trust": 1.7,
        "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c05270839"
      },
      {
        "trust": 1.7,
        "url": "http://www.securitytracker.com/id/1033951"
      },
      {
        "trust": 1.7,
        "url": "http://www.debian.org/security/2015/dsa-3388"
      },
      {
        "trust": 1.7,
        "url": "https://security.netapp.com/advisory/ntap-20171004-0001/"
      },
      {
        "trust": 1.7,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf"
      },
      {
        "trust": 1.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7871"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu96269392/index.html"
      },
      {
        "trust": 0.7,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7855"
      },
      {
        "trust": 0.7,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7704"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7702"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7852"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7701"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7850"
      },
      {
        "trust": 0.6,
        "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7705"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7703"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7691"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7853"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7692"
      },
      {
        "trust": 0.4,
        "url": "http://support.ntp.org/bin/view/main/securitynotice#recent_vulnerabilities"
      },
      {
        "trust": 0.4,
        "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20151021-ntp"
      },
      {
        "trust": 0.4,
        "url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docid=emr_na-c05270839"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7848"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7849"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7854"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7851"
      },
      {
        "trust": 0.3,
        "url": "https://github.com/ntp-project/ntp/blob/stable/news#l295"
      },
      {
        "trust": 0.3,
        "url": "http://www.ntp.org/"
      },
      {
        "trust": 0.3,
        "url": "http://talosintel.com/reports/talos-2015-0069/"
      },
      {
        "trust": 0.3,
        "url": "http://kb.juniper.net/infocenter/index?page=content\u0026id=jsa10711"
      },
      {
        "trust": 0.3,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-17-094-04"
      },
      {
        "trust": 0.3,
        "url": "http://learn.extremenetworks.com/rs/641-vmv-602/images/vn-2015-009_multiple_ntp_vulnerabilities.pdf"
      },
      {
        "trust": 0.3,
        "url": "http://seclists.org/bugtraq/2015/oct/113"
      },
      {
        "trust": 0.3,
        "url": "https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5099260"
      },
      {
        "trust": 0.3,
        "url": "https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5099225"
      },
      {
        "trust": 0.2,
        "url": "https://security.gentoo.org/"
      },
      {
        "trust": 0.2,
        "url": "http://creativecommons.org/licenses/by-sa/2.5"
      },
      {
        "trust": 0.2,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7871"
      },
      {
        "trust": 0.2,
        "url": "https://bugs.gentoo.org."
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7702"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7851"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7701"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7855"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7704"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7852"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7850"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7854"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7849"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7853"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7871"
      },
      {
        "trust": 0.2,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7848"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5219"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5300"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5194"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5146"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5195"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5196"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2014-9750"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/287.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://www.rapid7.com/db/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2015-7871"
      },
      {
        "trust": 0.1,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-15-356-01"
      },
      {
        "trust": 0.1,
        "url": "https://alas.aws.amazon.com/alas-2015-607.html"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/2783-1/"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7702"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-1549"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7849"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7852"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7978"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-8140"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7978"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-1551"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2516"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7975"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7973"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7979"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-8138"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-8139"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8158"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4954"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4956"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7973"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7853"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7704"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8140"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7974"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7691"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8139"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4957"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7703"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7855"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4955"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7705"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2517"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-1548"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-1547"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-8158"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7854"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-1547"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2519"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2518"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7851"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7977"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7848"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7977"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-1550"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7850"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7701"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7692"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8138"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7979"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7974"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4953"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7975"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7976"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7976"
      },
      {
        "trust": 0.1,
        "url": "http://www.hpe.com/support/security_bulletin_archive"
      },
      {
        "trust": 0.1,
        "url": "https://www.hpe.com/info/report-security-vulnerability"
      },
      {
        "trust": 0.1,
        "url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docid=emr_na-c01345499"
      },
      {
        "trust": 0.1,
        "url": "http://www.hpe.com/support/subscriber_choice"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-15:25/ntp-93.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-15:25.ntp.asc"
      },
      {
        "trust": 0.1,
        "url": "https://www.freebsd.org/handbook/makeworld.html."
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-15:25/ntp-102.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/."
      },
      {
        "trust": 0.1,
        "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=nnnnnn"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-15:25/ntp-93.patch.bz2"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7703"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-15:25/ntp-101.patch.bz2"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-15:25/ntp-101.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-15:25/ntp-102.patch.bz2"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4536"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5154"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7504"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4535"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-4103"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-4105"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4535"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-6030"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7835"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8551"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4538"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8552"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-6036"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-6036"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7814"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-4106"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7970"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8550"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3456"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3497"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4536"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3495"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-6031"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-4106"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4537"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-6034"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3259"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3340"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-2151"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4411"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7972"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4538"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-6035"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3495"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4539"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3494"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-6033"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-6032"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4537"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-6035"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-6032"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7813"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3515"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7971"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3498"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2270"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3209"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-6031"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-6030"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3498"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3497"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3494"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8555"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-4163"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8340"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-4104"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7311"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3259"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-2151"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8339"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-6033"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8554"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4411"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-6034"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-4105"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8341"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-4539"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3340"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-4164"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3515"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-4103"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-3496"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3209"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3456"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7969"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-4104"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2012-3496"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2271"
      },
      {
        "trust": 0.1,
        "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-7812"
      },
      {
        "trust": 0.1,
        "url": "http://www.ubuntu.com/usn/usn-2783-1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/ntp/1:4.2.6.p5+dfsg-3ubuntu8.1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/ntp/1:4.2.6.p5+dfsg-3ubuntu2.14.04.5"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/ntp/1:4.2.6.p3+dfsg-1ubuntu3.6"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/ntp/1:4.2.6.p5+dfsg-3ubuntu6.2"
      },
      {
        "trust": 0.1,
        "url": "http://www.cs.bu.edu/~goldbe/ntpattack.html"
      },
      {
        "trust": 0.1,
        "url": "http://gpgtools.org"
      },
      {
        "trust": 0.1,
        "url": "http://talosintel.com/vulnerability-reports/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2014-9751"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3405"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "http://slackware.com"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7705"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7691"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-5196"
      },
      {
        "trust": 0.1,
        "url": "http://slackware.com/gpg-key"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-9750"
      },
      {
        "trust": 0.1,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7692"
      },
      {
        "trust": 0.1,
        "url": "http://osuosl.org)"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2015-7871"
      },
      {
        "db": "BID",
        "id": "77287"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      },
      {
        "db": "PACKETSTORM",
        "id": "137992"
      },
      {
        "db": "PACKETSTORM",
        "id": "138803"
      },
      {
        "db": "PACKETSTORM",
        "id": "134082"
      },
      {
        "db": "PACKETSTORM",
        "id": "136587"
      },
      {
        "db": "PACKETSTORM",
        "id": "134102"
      },
      {
        "db": "PACKETSTORM",
        "id": "134034"
      },
      {
        "db": "PACKETSTORM",
        "id": "134162"
      },
      {
        "db": "PACKETSTORM",
        "id": "134137"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-574"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7871"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULMON",
        "id": "CVE-2015-7871"
      },
      {
        "db": "BID",
        "id": "77287"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      },
      {
        "db": "PACKETSTORM",
        "id": "137992"
      },
      {
        "db": "PACKETSTORM",
        "id": "138803"
      },
      {
        "db": "PACKETSTORM",
        "id": "134082"
      },
      {
        "db": "PACKETSTORM",
        "id": "136587"
      },
      {
        "db": "PACKETSTORM",
        "id": "134102"
      },
      {
        "db": "PACKETSTORM",
        "id": "134034"
      },
      {
        "db": "PACKETSTORM",
        "id": "134162"
      },
      {
        "db": "PACKETSTORM",
        "id": "134137"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-574"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-7871"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-08-07T00:00:00",
        "db": "VULMON",
        "id": "CVE-2015-7871"
      },
      {
        "date": "2015-10-21T00:00:00",
        "db": "BID",
        "id": "77287"
      },
      {
        "date": "2017-09-06T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      },
      {
        "date": "2016-07-21T15:56:23",
        "db": "PACKETSTORM",
        "id": "137992"
      },
      {
        "date": "2016-09-21T17:24:00",
        "db": "PACKETSTORM",
        "id": "138803"
      },
      {
        "date": "2015-10-26T19:32:22",
        "db": "PACKETSTORM",
        "id": "134082"
      },
      {
        "date": "2016-04-06T13:30:13",
        "db": "PACKETSTORM",
        "id": "136587"
      },
      {
        "date": "2015-10-27T23:30:50",
        "db": "PACKETSTORM",
        "id": "134102"
      },
      {
        "date": "2015-10-21T19:22:22",
        "db": "PACKETSTORM",
        "id": "134034"
      },
      {
        "date": "2015-11-02T16:48:39",
        "db": "PACKETSTORM",
        "id": "134162"
      },
      {
        "date": "2015-10-30T23:22:57",
        "db": "PACKETSTORM",
        "id": "134137"
      },
      {
        "date": "2015-10-27T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201510-574"
      },
      {
        "date": "2017-08-07T20:29:00.997000",
        "db": "NVD",
        "id": "CVE-2015-7871"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-04-13T00:00:00",
        "db": "VULMON",
        "id": "CVE-2015-7871"
      },
      {
        "date": "2017-05-23T16:24:00",
        "db": "BID",
        "id": "77287"
      },
      {
        "date": "2021-04-16T09:06:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      },
      {
        "date": "2021-04-14T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201510-574"
      },
      {
        "date": "2021-04-13T12:15:15.273000",
        "db": "NVD",
        "id": "CVE-2015-7871"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "134102"
      },
      {
        "db": "PACKETSTORM",
        "id": "134034"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-574"
      }
    ],
    "trust": 0.8
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "NTP\u00a0 Authentication vulnerabilities in",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007708"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "authorization issue",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-574"
      }
    ],
    "trust": 0.6
  }
}

{
  "GSD": {
    "alias": "CVE-2015-7871",
    "description": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
    "id": "GSD-2015-7871",
    "references": [
      "https://www.suse.com/security/cve/CVE-2015-7871.html",
      "https://www.debian.org/security/2015/dsa-3388",
      "https://ubuntu.com/security/CVE-2015-7871",
      "https://advisories.mageia.org/CVE-2015-7871.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2015-7871.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-7871"
      ],
      "details": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
      "id": "GSD-2015-7871",
      "modified": "2023-12-13T01:20:01.194580Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2015-7871",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://support.ntp.org/bin/view/Main/NtpBug2941",
            "refsource": "CONFIRM",
            "url": "http://support.ntp.org/bin/view/Main/NtpBug2941"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1274265",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1274265"
          },
          {
            "name": "1033951",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1033951"
          },
          {
            "name": "DSA-3388",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2015/dsa-3388"
          },
          {
            "name": "77287",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/77287"
          },
          {
            "name": "GLSA-201604-03",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201604-03"
          },
          {
            "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
            "refsource": "CONFIRM",
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839"
          },
          {
            "name": "GLSA-201607-15",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201607-15"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20171004-0001/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20171004-0001/"
          },
          {
            "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
            "refsource": "CONFIRM",
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p186:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p187:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p188:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p189:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p190:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p191:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p192:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p193:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p194:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p195:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p196:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p197:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p198:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p199:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p200:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p201:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p202:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p203:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p204:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p205:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p206:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p207:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p208:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p209:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p210:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p211:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p212:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p213:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p214:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p215:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p216:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p217:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p218:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p219:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p220:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p221:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p222:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p223:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p224:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p225:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p226:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p227:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p228:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p229:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p230:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p231_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p232_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p233_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p234_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p235_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p236_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p237_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p238_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p239_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p240_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p241_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p242_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p243_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p244_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p245_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p246_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p247_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p248_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p249_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.5:p250_rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.2.8",
                "versionStartIncluding": "4.2.6",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.3.77",
                "versionStartIncluding": "4.3.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:clustered_data_ontap:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:netapp:data_ontap:-:*:*:*:*:7-mode:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-7871"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-287"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1274265",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1274265"
            },
            {
              "name": "77287",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/77287"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug2941",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://support.ntp.org/bin/view/Main/NtpBug2941"
            },
            {
              "name": "GLSA-201607-15",
              "refsource": "GENTOO",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "https://security.gentoo.org/glsa/201607-15"
            },
            {
              "name": "GLSA-201604-03",
              "refsource": "GENTOO",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "https://security.gentoo.org/glsa/201604-03"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839"
            },
            {
              "name": "1033951",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1033951"
            },
            {
              "name": "DSA-3388",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.debian.org/security/2015/dsa-3388"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20171004-0001/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20171004-0001/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": true,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2021-04-13T12:15Z",
      "publishedDate": "2017-08-07T20:29Z"
    }
  }
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB9B114E-15BF-4731-9296-A8F82591B418",
              "versionEndExcluding": "4.2.8",
              "versionStartIncluding": "4.2.6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "79494F07-6081-497D-8A2D-B05486599EAE",
              "versionEndExcluding": "4.3.77",
              "versionStartIncluding": "4.3.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p186:*:*:*:*:*:*",
              "matchCriteriaId": "D5D4B9E2-A28F-4E43-980C-698F833D03DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p187:*:*:*:*:*:*",
              "matchCriteriaId": "3C78C23F-3125-4CAB-B75D-EA105A5C5D24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p188:*:*:*:*:*:*",
              "matchCriteriaId": "0A5267AF-4F05-4124-89B2-AC705C181FA7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p189:*:*:*:*:*:*",
              "matchCriteriaId": "00E07D52-2DEE-4ACF-AA82-4DD108D25B7E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p190:*:*:*:*:*:*",
              "matchCriteriaId": "A0FB2BFD-AE6A-46D5-828A-0CAE5E445B79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p191:*:*:*:*:*:*",
              "matchCriteriaId": "7A25BD2C-AF41-4438-B32D-44BD331E8D22",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p192:*:*:*:*:*:*",
              "matchCriteriaId": "10D2C131-7219-4416-9A3F-262615760DC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p193:*:*:*:*:*:*",
              "matchCriteriaId": "7EE354F9-58B9-4DCD-91EC-030F079EC8E5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p194:*:*:*:*:*:*",
              "matchCriteriaId": "3E129E07-8B34-45C5-BDAC-89B8ECA960DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p195:*:*:*:*:*:*",
              "matchCriteriaId": "B826EAE0-D9BA-4C7D-A5BE-561E5AB35664",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p196:*:*:*:*:*:*",
              "matchCriteriaId": "931932A6-D19A-4B85-A90A-BA52D9AFA9F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p197:*:*:*:*:*:*",
              "matchCriteriaId": "516748AA-9E25-4C2C-8D58-7E75D373F6D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p198:*:*:*:*:*:*",
              "matchCriteriaId": "61DC3B1A-7264-44F2-915A-716FD133E5C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p199:*:*:*:*:*:*",
              "matchCriteriaId": "DFD406BC-AFDE-4425-9C63-7D58ADCC24C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p200:*:*:*:*:*:*",
              "matchCriteriaId": "86F9B4C0-0504-43ED-B64C-894E4B4E77E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p201:*:*:*:*:*:*",
              "matchCriteriaId": "A2A9EB64-BB4A-4E4E-994B-0145AD134588",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p202:*:*:*:*:*:*",
              "matchCriteriaId": "655A7FF1-672A-490F-9E41-0AA40A1DEFEA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p203:*:*:*:*:*:*",
              "matchCriteriaId": "EA207F59-B630-4BBB-9CD7-BA7B64581907",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p204:*:*:*:*:*:*",
              "matchCriteriaId": "06AE2082-B219-4E94-89E8-E1328224C9D9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p205:*:*:*:*:*:*",
              "matchCriteriaId": "6E0F5656-3E41-4568-A810-F2CFA3677488",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p206:*:*:*:*:*:*",
              "matchCriteriaId": "934152EB-5F5A-4BD8-B832-3B342551F9AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p207:*:*:*:*:*:*",
              "matchCriteriaId": "6936BEB5-B765-45C5-B671-A9D0CC4988C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p208:*:*:*:*:*:*",
              "matchCriteriaId": "BAA1E4CD-45EE-4814-AC6B-DE786C5B3B6A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p209:*:*:*:*:*:*",
              "matchCriteriaId": "95779DD0-C768-4B1C-A720-23BE19606B23",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p210:*:*:*:*:*:*",
              "matchCriteriaId": "1B035472-2B64-4BE4-8D25-6E31937641E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p211:*:*:*:*:*:*",
              "matchCriteriaId": "3CE88876-F0BB-43A1-9A4A-91C5D6FFC02B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p212:*:*:*:*:*:*",
              "matchCriteriaId": "4E4BE466-B479-47BA-9A1F-F0184E252103",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p213:*:*:*:*:*:*",
              "matchCriteriaId": "4E6D7F8F-EF71-44E6-B33F-E0265266C616",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p214:*:*:*:*:*:*",
              "matchCriteriaId": "AC47FB1E-289A-4AA1-9DF1-0CEE13C9335F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p215:*:*:*:*:*:*",
              "matchCriteriaId": "B7BC8DB4-E715-44F1-8759-0414613C9F38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p216:*:*:*:*:*:*",
              "matchCriteriaId": "5AF5BC27-EE65-4FB4-975E-FA3933B3202C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p217:*:*:*:*:*:*",
              "matchCriteriaId": "795D50A9-41E5-40CE-88E9-391229607301",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p218:*:*:*:*:*:*",
              "matchCriteriaId": "1DE4338B-F5B3-4410-886D-0F28A7ECE824",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p219:*:*:*:*:*:*",
              "matchCriteriaId": "B1463DC6-D0C7-46E6-8418-B7900C99D079",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p220:*:*:*:*:*:*",
              "matchCriteriaId": "C5B7AA5B-2BD5-4F19-A8BB-DF4677995602",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p221:*:*:*:*:*:*",
              "matchCriteriaId": "DBCF724B-5018-4794-97D9-D8EDC2F04060",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p222:*:*:*:*:*:*",
              "matchCriteriaId": "2A62EAF1-3D51-456F-BBE3-A2E8CBE7960D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p223:*:*:*:*:*:*",
              "matchCriteriaId": "67D86D6C-A8A3-4CD4-B1A5-57941B51C732",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p224:*:*:*:*:*:*",
              "matchCriteriaId": "E793243F-4179-46C9-B422-DC3D6E688B2B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p225:*:*:*:*:*:*",
              "matchCriteriaId": "6EAC9B6E-3A88-4DED-A5D4-862E076620BF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p226:*:*:*:*:*:*",
              "matchCriteriaId": "AD8E8B74-6E16-47FF-A019-54B0438A8CE7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p227:*:*:*:*:*:*",
              "matchCriteriaId": "3C210EFA-7BF2-4EEE-B59C-F3C75743E182",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p228:*:*:*:*:*:*",
              "matchCriteriaId": "23A9CDE2-4520-4542-93B0-74A01E919597",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p229:*:*:*:*:*:*",
              "matchCriteriaId": "94A7790A-DACE-4F02-B2FF-2C851EFD9717",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p230:*:*:*:*:*:*",
              "matchCriteriaId": "5ED47A47-3CB2-45CC-8147-CFFE0B93D966",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p231_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "4FC2172C-73BD-441D-9963-5C9E89FB68F7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p232_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "485C8744-A185-46EB-B27F-8A42ED76964B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p233_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "C01153E2-A4E3-4EF9-A33E-1026F578CB44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p234_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "505CE414-C5E5-4251-9F02-A8A0DA6C0E91",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p235_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "607E83FB-FDB7-49CA-9DA9-B8DA43C3DF23",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p236_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "864BA14B-B357-4ADD-BCE1-B2EAE4D299FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p237_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "2856AAB8-172F-4657-85FF-9FFB698C4457",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p238_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "7C2B8290-8AD6-4EDD-9736-730DD33CA73A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p239_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "A509FC81-ABFD-4CE1-ABD6-C47ECCF97892",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p240_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "7111A1FB-142C-4538-BC96-F71AEDC0FB4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p241_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "FB54C36C-F07A-4F99-A093-8EF10689E1C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p242_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "CD57B6E4-9947-4790-BCAF-30B37C7CB837",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p243_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "232170D9-923D-4DA5-9A7D-6A5BDCD37165",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p244_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "A0BE1B30-DB6E-4029-8212-035449CEE22F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p245_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "3181F3BF-8704-4D54-ABC4-CB68C89AF52D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p246_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "E61A5F5E-8DCC-4809-A2DE-E39C8E01976F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p247_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "1D2E80CD-0EAA-423B-B885-EDC5BFE962BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p248_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "11F45456-692B-415D-BDBF-BA639AA622BB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p249_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "FCEF3E6A-48C3-4A00-B286-58E642DE5928",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.5:p250_rc1:*:*:*:*:*:*",
              "matchCriteriaId": "8CE352E5-DFFC-4580-9D5E-95EE7A5C2BD6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*",
              "matchCriteriaId": "C855BBD2-2B38-4EFF-9DBE-CA61CCACD0DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*",
              "matchCriteriaId": "49ADE0C3-F75C-4EC0-8805-56013F0EB92C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*",
              "matchCriteriaId": "D8FF625A-EFA3-43D1-8698-4A37AE31A07C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*",
              "matchCriteriaId": "E3B99BBD-97FE-4615-905A-A614592226F8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*",
              "matchCriteriaId": "E7A9AD3A-F030-4331-B52A-518BD963AB8A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*",
              "matchCriteriaId": "C293B8BE-6691-4944-BCD6-25EB98CABC73",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*",
              "matchCriteriaId": "CEA650F8-2576-494A-A861-61572CA319D0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*",
              "matchCriteriaId": "4ED21EE8-7CBF-4BC5-BFC3-185D41296238",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*",
              "matchCriteriaId": "C76A0B44-13DE-4173-8D05-DA54F6A71759",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*",
              "matchCriteriaId": "1450241C-2F6D-4122-B33C-D78D065BA403",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*",
              "matchCriteriaId": "721AFD22-91D3-488E-A5E6-DD84C86E412B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*",
              "matchCriteriaId": "8D6ADDB1-2E96-4FF6-AE95-4B06654D38B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*",
              "matchCriteriaId": "41E44E9F-6383-4E12-AEDC-B653FEA77A48",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*",
              "matchCriteriaId": "466D9A37-2658-4695-9429-0C6BF4A631C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*",
              "matchCriteriaId": "99774181-5F12-446C-AC2C-DB1C52295EED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*",
              "matchCriteriaId": "4427EE6D-3F79-4FF5-B3EC-EE6BD01562CE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "212E1878-1B9A-4CB4-A1CE-EAD60B867161",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:clustered_data_ontap:*:*",
              "matchCriteriaId": "95B173E0-1475-4F8D-A982-86F36BE3DD4A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FED6CAE-D97F-49E0-9D00-1642A3A427B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netapp:data_ontap:-:*:*:*:*:7-mode:*:*",
              "matchCriteriaId": "392A1364-2739-450D-9E19-DFF93081C2C6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication."
    },
    {
      "lang": "es",
      "value": "Los paquetes Crypto-NAK en ntpd en NTP 4.2.x en versiones anteriores a 4.2.8p4, y 4.3.x en versiones anteriores a 4.3.77 permiten que atacantes remotos eludan la autenticaci\u00f3n."
    }
  ],
  "id": "CVE-2015-7871",
  "lastModified": "2025-04-20T01:37:25.860",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": true,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-08-07T20:29:00.997",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://support.ntp.org/bin/view/Main/NtpBug2941"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2015/dsa-3388"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/77287"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1033951"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1274265"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://security.gentoo.org/glsa/201604-03"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://security.gentoo.org/glsa/201607-15"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20171004-0001/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://support.ntp.org/bin/view/Main/NtpBug2941"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2015/dsa-3388"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/77287"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1033951"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1274265"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://security.gentoo.org/glsa/201604-03"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://security.gentoo.org/glsa/201607-15"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20171004-0001/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "ntp-4.2.8p9-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the ntp-4.2.8p9-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10181",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10181-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2009-0159 page",
        "url": "https://www.suse.com/security/cve/CVE-2009-0159/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2009-1252 page",
        "url": "https://www.suse.com/security/cve/CVE-2009-1252/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-5211 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-5211/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9293 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9293/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9294 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9294/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9295 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9295/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9296 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9296/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9297 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9297/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-9298 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-9298/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-1798 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-1798/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-1799 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-1799/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5300 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5300/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7691 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7691/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7692 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7692/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7701 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7701/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7702 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7702/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7703 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7703/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7704 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7704/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7705 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7705/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7848 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7848/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7849 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7849/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7850 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7850/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7851 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7851/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7852 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7852/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7853 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7854 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7854/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7855 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7855/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7871 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7871/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7973 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7973/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7974 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7974/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7975 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7975/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7976 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7976/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7977 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7977/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7978 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7978/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7979 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7979/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8138 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8138/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8158 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8158/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1547 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1547/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1548 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1548/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1549 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1549/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1550 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1550/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1551 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1551/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2516 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2516/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2517 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2517/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2518 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2518/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2519 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2519/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4953 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4953/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4954 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4954/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4955 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4955/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4956 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4956/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4957 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4957/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7426 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7426/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7427 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7427/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7428 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7428/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7429 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7429/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7431 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7431/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7433 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7433/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7434 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7434/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9310 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9310/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9311 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9311/"
      }
    ],
    "title": "ntp-4.2.8p9-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10181-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p9-1.1.aarch64",
                "product": {
                  "name": "ntp-4.2.8p9-1.1.aarch64",
                  "product_id": "ntp-4.2.8p9-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p9-1.1.aarch64",
                "product": {
                  "name": "ntp-doc-4.2.8p9-1.1.aarch64",
                  "product_id": "ntp-doc-4.2.8p9-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p9-1.1.ppc64le",
                "product": {
                  "name": "ntp-4.2.8p9-1.1.ppc64le",
                  "product_id": "ntp-4.2.8p9-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p9-1.1.ppc64le",
                "product": {
                  "name": "ntp-doc-4.2.8p9-1.1.ppc64le",
                  "product_id": "ntp-doc-4.2.8p9-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p9-1.1.s390x",
                "product": {
                  "name": "ntp-4.2.8p9-1.1.s390x",
                  "product_id": "ntp-4.2.8p9-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p9-1.1.s390x",
                "product": {
                  "name": "ntp-doc-4.2.8p9-1.1.s390x",
                  "product_id": "ntp-doc-4.2.8p9-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p9-1.1.x86_64",
                "product": {
                  "name": "ntp-4.2.8p9-1.1.x86_64",
                  "product_id": "ntp-4.2.8p9-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p9-1.1.x86_64",
                "product": {
                  "name": "ntp-doc-4.2.8p9-1.1.x86_64",
                  "product_id": "ntp-doc-4.2.8p9-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64"
        },
        "product_reference": "ntp-4.2.8p9-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le"
        },
        "product_reference": "ntp-4.2.8p9-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x"
        },
        "product_reference": "ntp-4.2.8p9-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p9-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64"
        },
        "product_reference": "ntp-doc-4.2.8p9-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le"
        },
        "product_reference": "ntp-doc-4.2.8p9-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p9-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p9-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2009-0159",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2009-0159"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2009-0159",
          "url": "https://www.suse.com/security/cve/CVE-2009-0159"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 484653 for CVE-2009-0159",
          "url": "https://bugzilla.suse.com/484653"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 501632 for CVE-2009-0159",
          "url": "https://bugzilla.suse.com/501632"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2009-0159"
    },
    {
      "cve": "CVE-2009-1252",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2009-1252"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2009-1252",
          "url": "https://www.suse.com/security/cve/CVE-2009-1252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 501632 for CVE-2009-1252",
          "url": "https://bugzilla.suse.com/501632"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2009-1252"
    },
    {
      "cve": "CVE-2013-5211",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-5211"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-5211",
          "url": "https://www.suse.com/security/cve/CVE-2013-5211"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 857195 for CVE-2013-5211",
          "url": "https://bugzilla.suse.com/857195"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 889447 for CVE-2013-5211",
          "url": "https://bugzilla.suse.com/889447"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2013-5211",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-5211"
    },
    {
      "cve": "CVE-2014-9293",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9293"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9293",
          "url": "https://www.suse.com/security/cve/CVE-2014-9293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910764 for CVE-2014-9293",
          "url": "https://bugzilla.suse.com/910764"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911053 for CVE-2014-9293",
          "url": "https://bugzilla.suse.com/911053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2014-9293",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2014-9293",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-9293"
    },
    {
      "cve": "CVE-2014-9294",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9294"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9294",
          "url": "https://www.suse.com/security/cve/CVE-2014-9294"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910764 for CVE-2014-9294",
          "url": "https://bugzilla.suse.com/910764"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911053 for CVE-2014-9294",
          "url": "https://bugzilla.suse.com/911053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2014-9294",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2014-9294",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-9294"
    },
    {
      "cve": "CVE-2014-9295",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9295"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9295",
          "url": "https://www.suse.com/security/cve/CVE-2014-9295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910764 for CVE-2014-9295",
          "url": "https://bugzilla.suse.com/910764"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911053 for CVE-2014-9295",
          "url": "https://bugzilla.suse.com/911053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2014-9295",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 916239 for CVE-2014-9295",
          "url": "https://bugzilla.suse.com/916239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2014-9295",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-9295"
    },
    {
      "cve": "CVE-2014-9296",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9296"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9296",
          "url": "https://www.suse.com/security/cve/CVE-2014-9296"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 910764 for CVE-2014-9296",
          "url": "https://bugzilla.suse.com/910764"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911053 for CVE-2014-9296",
          "url": "https://bugzilla.suse.com/911053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2014-9296",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2014-9296",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2014-9296",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-9296"
    },
    {
      "cve": "CVE-2014-9297",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9297"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9297",
          "url": "https://www.suse.com/security/cve/CVE-2014-9297"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2014-9297",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 948963 for CVE-2014-9297",
          "url": "https://bugzilla.suse.com/948963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2014-9297",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-9297"
    },
    {
      "cve": "CVE-2014-9298",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-9298"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-9298",
          "url": "https://www.suse.com/security/cve/CVE-2014-9298"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2014-9298",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 948963 for CVE-2014-9298",
          "url": "https://bugzilla.suse.com/948963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2014-9298",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2014-9298"
    },
    {
      "cve": "CVE-2015-1798",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-1798"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-1798",
          "url": "https://www.suse.com/security/cve/CVE-2015-1798"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924202 for CVE-2015-1798",
          "url": "https://bugzilla.suse.com/924202"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927497 for CVE-2015-1798",
          "url": "https://bugzilla.suse.com/927497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928321 for CVE-2015-1798",
          "url": "https://bugzilla.suse.com/928321"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 936327 for CVE-2015-1798",
          "url": "https://bugzilla.suse.com/936327"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 957163 for CVE-2015-1798",
          "url": "https://bugzilla.suse.com/957163"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-1798"
    },
    {
      "cve": "CVE-2015-1799",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-1799"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-1799",
          "url": "https://www.suse.com/security/cve/CVE-2015-1799"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 924202 for CVE-2015-1799",
          "url": "https://bugzilla.suse.com/924202"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927497 for CVE-2015-1799",
          "url": "https://bugzilla.suse.com/927497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 928321 for CVE-2015-1799",
          "url": "https://bugzilla.suse.com/928321"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 936327 for CVE-2015-1799",
          "url": "https://bugzilla.suse.com/936327"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943565 for CVE-2015-1799",
          "url": "https://bugzilla.suse.com/943565"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 957163 for CVE-2015-1799",
          "url": "https://bugzilla.suse.com/957163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-1799",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962624 for CVE-2015-1799",
          "url": "https://bugzilla.suse.com/962624"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-1799"
    },
    {
      "cve": "CVE-2015-5300",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5300"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5300",
          "url": "https://www.suse.com/security/cve/CVE-2015-5300"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951629 for CVE-2015-5300",
          "url": "https://bugzilla.suse.com/951629"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-5300",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962624 for CVE-2015-5300",
          "url": "https://bugzilla.suse.com/962624"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5300"
    },
    {
      "cve": "CVE-2015-7691",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7691"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations.  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7691",
          "url": "https://www.suse.com/security/cve/CVE-2015-7691"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7691",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7691"
    },
    {
      "cve": "CVE-2015-7692",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7692"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7692",
          "url": "https://www.suse.com/security/cve/CVE-2015-7692"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7692",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7692"
    },
    {
      "cve": "CVE-2015-7701",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7701"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7701",
          "url": "https://www.suse.com/security/cve/CVE-2015-7701"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7701",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7701"
    },
    {
      "cve": "CVE-2015-7702",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7702"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).  NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7702",
          "url": "https://www.suse.com/security/cve/CVE-2015-7702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 911792 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/911792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7702",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7702"
    },
    {
      "cve": "CVE-2015-7703",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7703"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The \"pidfile\" or \"driftfile\" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7703",
          "url": "https://www.suse.com/security/cve/CVE-2015-7703"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943216 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943218 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943218"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943219 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943221 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/943221"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7703",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7703"
    },
    {
      "cve": "CVE-2015-7704",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7704"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted \"KOD\" messages.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7704",
          "url": "https://www.suse.com/security/cve/CVE-2015-7704"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952611 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/952611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2015-7704",
          "url": "https://bugzilla.suse.com/977446"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7704"
    },
    {
      "cve": "CVE-2015-7705",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7705"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7705",
          "url": "https://www.suse.com/security/cve/CVE-2015-7705"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952611 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/952611"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7705",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7705"
    },
    {
      "cve": "CVE-2015-7848",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7848"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7848",
          "url": "https://www.suse.com/security/cve/CVE-2015-7848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7848",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7848"
    },
    {
      "cve": "CVE-2015-7849",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7849"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7849",
          "url": "https://www.suse.com/security/cve/CVE-2015-7849"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7849",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7849"
    },
    {
      "cve": "CVE-2015-7850",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7850"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7850",
          "url": "https://www.suse.com/security/cve/CVE-2015-7850"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7850",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7850"
    },
    {
      "cve": "CVE-2015-7851",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7851"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use \u0027\\\u0027 or \u0027/\u0027 characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7851",
          "url": "https://www.suse.com/security/cve/CVE-2015-7851"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7851",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7851"
    },
    {
      "cve": "CVE-2015-7852",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7852"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7852",
          "url": "https://www.suse.com/security/cve/CVE-2015-7852"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7852",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7852"
    },
    {
      "cve": "CVE-2015-7853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7853",
          "url": "https://www.suse.com/security/cve/CVE-2015-7853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7853",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7853"
    },
    {
      "cve": "CVE-2015-7854",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7854"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7854",
          "url": "https://www.suse.com/security/cve/CVE-2015-7854"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7854",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7854"
    },
    {
      "cve": "CVE-2015-7855",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7855"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7855",
          "url": "https://www.suse.com/security/cve/CVE-2015-7855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2015-7855",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7855"
    },
    {
      "cve": "CVE-2015-7871",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7871"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7871",
          "url": "https://www.suse.com/security/cve/CVE-2015-7871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952606 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/952606"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7871",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2015-7871"
    },
    {
      "cve": "CVE-2015-7973",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7973"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7973",
          "url": "https://www.suse.com/security/cve/CVE-2015-7973"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7973",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7973",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7973"
    },
    {
      "cve": "CVE-2015-7974",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7974"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7974",
          "url": "https://www.suse.com/security/cve/CVE-2015-7974"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7974",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962960 for CVE-2015-7974",
          "url": "https://bugzilla.suse.com/962960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7974",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-7974"
    },
    {
      "cve": "CVE-2015-7975",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7975"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7975",
          "url": "https://www.suse.com/security/cve/CVE-2015-7975"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7975",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962988 for CVE-2015-7975",
          "url": "https://bugzilla.suse.com/962988"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7975",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-7975"
    },
    {
      "cve": "CVE-2015-7976",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7976"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7976",
          "url": "https://www.suse.com/security/cve/CVE-2015-7976"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962802 for CVE-2015-7976",
          "url": "https://bugzilla.suse.com/962802"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7976",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-7976"
    },
    {
      "cve": "CVE-2015-7977",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7977"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7977",
          "url": "https://www.suse.com/security/cve/CVE-2015-7977"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7977",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962970 for CVE-2015-7977",
          "url": "https://bugzilla.suse.com/962970"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7977",
          "url": "https://bugzilla.suse.com/962995"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7977"
    },
    {
      "cve": "CVE-2015-7978",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7978"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7978",
          "url": "https://www.suse.com/security/cve/CVE-2015-7978"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962970 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/962970"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/962995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963000 for CVE-2015-7978",
          "url": "https://bugzilla.suse.com/963000"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7978"
    },
    {
      "cve": "CVE-2015-7979",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7979"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7979",
          "url": "https://www.suse.com/security/cve/CVE-2015-7979"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962784 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/962784"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962995 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/962995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977459 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/977459"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982065 for CVE-2015-7979",
          "url": "https://bugzilla.suse.com/982065"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7979"
    },
    {
      "cve": "CVE-2015-8138",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8138"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8138",
          "url": "https://www.suse.com/security/cve/CVE-2015-8138"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951608 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/951608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963002 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/963002"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974668 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/974668"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2015-8138",
          "url": "https://bugzilla.suse.com/977446"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8138"
    },
    {
      "cve": "CVE-2015-8158",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8158"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8158",
          "url": "https://www.suse.com/security/cve/CVE-2015-8158"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8158",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962966 for CVE-2015-8158",
          "url": "https://bugzilla.suse.com/962966"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2015-8158"
    },
    {
      "cve": "CVE-2016-1547",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1547"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1547",
          "url": "https://www.suse.com/security/cve/CVE-2016-1547"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962784 for CVE-2016-1547",
          "url": "https://bugzilla.suse.com/962784"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2016-1547",
          "url": "https://bugzilla.suse.com/977446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977459 for CVE-2016-1547",
          "url": "https://bugzilla.suse.com/977459"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982064 for CVE-2016-1547",
          "url": "https://bugzilla.suse.com/982064"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982065 for CVE-2016-1547",
          "url": "https://bugzilla.suse.com/982065"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1547"
    },
    {
      "cve": "CVE-2016-1548",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1548"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-\u003edst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1548",
          "url": "https://www.suse.com/security/cve/CVE-2016-1548"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2016-1548",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2016-1548",
          "url": "https://bugzilla.suse.com/977446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977461 for CVE-2016-1548",
          "url": "https://bugzilla.suse.com/977461"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982068 for CVE-2016-1548",
          "url": "https://bugzilla.suse.com/982068"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1548"
    },
    {
      "cve": "CVE-2016-1549",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1549"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim\u0027s clock.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1549",
          "url": "https://www.suse.com/security/cve/CVE-2016-1549"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083424 for CVE-2016-1549",
          "url": "https://bugzilla.suse.com/1083424"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2016-1549",
          "url": "https://bugzilla.suse.com/977446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977451 for CVE-2016-1549",
          "url": "https://bugzilla.suse.com/977451"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-1549"
    },
    {
      "cve": "CVE-2016-1550",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1550"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1550",
          "url": "https://www.suse.com/security/cve/CVE-2016-1550"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2016-1550",
          "url": "https://bugzilla.suse.com/977446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977464 for CVE-2016-1550",
          "url": "https://bugzilla.suse.com/977464"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-1550"
    },
    {
      "cve": "CVE-2016-1551",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1551"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip address of a reference clock (127.127.1.1 for example) that reaches the receive() function will match that reference clock\u0027s peer record and will be treated as a trusted peer. Any system that lacks the typical martian packet filtering which would block these packets is in danger of having its time controlled by an attacker.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1551",
          "url": "https://www.suse.com/security/cve/CVE-2016-1551"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2016-1551",
          "url": "https://bugzilla.suse.com/977446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977450 for CVE-2016-1551",
          "url": "https://bugzilla.suse.com/977450"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-1551"
    },
    {
      "cve": "CVE-2016-2516",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2516"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2516",
          "url": "https://www.suse.com/security/cve/CVE-2016-2516"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2016-2516",
          "url": "https://bugzilla.suse.com/977446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977452 for CVE-2016-2516",
          "url": "https://bugzilla.suse.com/977452"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2516"
    },
    {
      "cve": "CVE-2016-2517",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2517"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey.  NOTE: this vulnerability exists because of a CVE-2016-2516 regression.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2517",
          "url": "https://www.suse.com/security/cve/CVE-2016-2517"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2016-2517",
          "url": "https://bugzilla.suse.com/977446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977455 for CVE-2016-2517",
          "url": "https://bugzilla.suse.com/977455"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2517"
    },
    {
      "cve": "CVE-2016-2518",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2518"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2518",
          "url": "https://www.suse.com/security/cve/CVE-2016-2518"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2016-2518",
          "url": "https://bugzilla.suse.com/977446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977457 for CVE-2016-2518",
          "url": "https://bugzilla.suse.com/977457"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-2518"
    },
    {
      "cve": "CVE-2016-2519",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2519"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2519",
          "url": "https://www.suse.com/security/cve/CVE-2016-2519"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2016-2519",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2016-2519",
          "url": "https://bugzilla.suse.com/977446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977458 for CVE-2016-2519",
          "url": "https://bugzilla.suse.com/977458"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2519"
    },
    {
      "cve": "CVE-2016-4953",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4953"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4953",
          "url": "https://www.suse.com/security/cve/CVE-2016-4953"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962784 for CVE-2016-4953",
          "url": "https://bugzilla.suse.com/962784"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977459 for CVE-2016-4953",
          "url": "https://bugzilla.suse.com/977459"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982056 for CVE-2016-4953",
          "url": "https://bugzilla.suse.com/982056"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982065 for CVE-2016-4953",
          "url": "https://bugzilla.suse.com/982065"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-4953"
    },
    {
      "cve": "CVE-2016-4954",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4954"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4954",
          "url": "https://www.suse.com/security/cve/CVE-2016-4954"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982056 for CVE-2016-4954",
          "url": "https://bugzilla.suse.com/982056"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982066 for CVE-2016-4954",
          "url": "https://bugzilla.suse.com/982066"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-4954"
    },
    {
      "cve": "CVE-2016-4955",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4955"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4955",
          "url": "https://www.suse.com/security/cve/CVE-2016-4955"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982056 for CVE-2016-4955",
          "url": "https://bugzilla.suse.com/982056"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982067 for CVE-2016-4955",
          "url": "https://bugzilla.suse.com/982067"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-4955"
    },
    {
      "cve": "CVE-2016-4956",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4956"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4956",
          "url": "https://www.suse.com/security/cve/CVE-2016-4956"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977461 for CVE-2016-4956",
          "url": "https://bugzilla.suse.com/977461"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982056 for CVE-2016-4956",
          "url": "https://bugzilla.suse.com/982056"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982068 for CVE-2016-4956",
          "url": "https://bugzilla.suse.com/982068"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-4956"
    },
    {
      "cve": "CVE-2016-4957",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4957"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4957",
          "url": "https://www.suse.com/security/cve/CVE-2016-4957"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977459 for CVE-2016-4957",
          "url": "https://bugzilla.suse.com/977459"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982056 for CVE-2016-4957",
          "url": "https://bugzilla.suse.com/982056"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982064 for CVE-2016-4957",
          "url": "https://bugzilla.suse.com/982064"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-4957"
    },
    {
      "cve": "CVE-2016-7426",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7426"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7426",
          "url": "https://www.suse.com/security/cve/CVE-2016-7426"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011406 for CVE-2016-7426",
          "url": "https://bugzilla.suse.com/1011406"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7426",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7426",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7426"
    },
    {
      "cve": "CVE-2016-7427",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7427"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7427",
          "url": "https://www.suse.com/security/cve/CVE-2016-7427"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011390 for CVE-2016-7427",
          "url": "https://bugzilla.suse.com/1011390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7427",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7427",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-7427"
    },
    {
      "cve": "CVE-2016-7428",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7428"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7428",
          "url": "https://www.suse.com/security/cve/CVE-2016-7428"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011417 for CVE-2016-7428",
          "url": "https://bugzilla.suse.com/1011417"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7428",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7428",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7428"
    },
    {
      "cve": "CVE-2016-7429",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7429"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7429",
          "url": "https://www.suse.com/security/cve/CVE-2016-7429"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011404 for CVE-2016-7429",
          "url": "https://bugzilla.suse.com/1011404"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7429",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7429",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-7429"
    },
    {
      "cve": "CVE-2016-7431",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7431"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero.  NOTE: this vulnerability exists because of a CVE-2015-8138 regression.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7431",
          "url": "https://www.suse.com/security/cve/CVE-2016-7431"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011395 for CVE-2016-7431",
          "url": "https://bugzilla.suse.com/1011395"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7431",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7431",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7431"
    },
    {
      "cve": "CVE-2016-7433",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7433"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a \"root distance that did not include the peer dispersion.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7433",
          "url": "https://www.suse.com/security/cve/CVE-2016-7433"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011411 for CVE-2016-7433",
          "url": "https://bugzilla.suse.com/1011411"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7433",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7433",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-7433"
    },
    {
      "cve": "CVE-2016-7434",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7434"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7434",
          "url": "https://www.suse.com/security/cve/CVE-2016-7434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011398 for CVE-2016-7434",
          "url": "https://bugzilla.suse.com/1011398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7434",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7434",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7434"
    },
    {
      "cve": "CVE-2016-9310",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9310"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9310",
          "url": "https://www.suse.com/security/cve/CVE-2016-9310"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011377 for CVE-2016-9310",
          "url": "https://bugzilla.suse.com/1011377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-9310",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-9310",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9310"
    },
    {
      "cve": "CVE-2016-9311",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9311"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
          "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9311",
          "url": "https://www.suse.com/security/cve/CVE-2016-9311"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011377 for CVE-2016-9311",
          "url": "https://bugzilla.suse.com/1011377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-9311",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-9311",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
            "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9311"
    }
  ]
}