vulnerability

Cisco ISE: CVE-2015-7975: Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: January 2016

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:P)
Published
Jan 27, 2016
Added
Oct 21, 2025
Modified
Oct 21, 2025

Description

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).

Solution

cisco-ise-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.