Denial of service - CVE-2015-7855

Vulnerability identifier: #VU625

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-7855

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote user to cause denial of service on the target system.
The weakness exists due to security bypass in NTP and allows attackers to perform DoS attack.
Successful exploitation of the vulnerability may result in denial of service on the vulnerable system.

To resolve the vulnerability HPE has released the software available at the site:
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05270839

• Exploit #106 - CVE-in-Ruby (Exploits written & ported to Ruby - no Metasploit) (March 18, 2020)
• Exploit #407 - NTP 4.2.8p3 - Denial of Service (March 18, 2020)

• http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05270839