CVE-2015-7853: Netapp Clustered Data Ontap

Critical severity, CVSS 9.8. EPSS: 11.8% chance of exploitation in the next 30 days.

The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.

Affected products

• Netapp Clustered Data Ontap: affected versions not specified
• Netapp Data Ontap: affected versions not specified
• Netapp Oncommand Balance: affected versions not specified
• Netapp Oncommand Performance Manager: affected versions not specified
• Netapp Oncommand Unified Manager: affected versions not specified
• Ntp Ntp: from 4.2.0, before 4.2.8 (fixed in 4.2.8); from 4.3.0, before 4.3.77 (fixed in 4.3.77); version 4.2.8 only

Published 2017-08-07. Last modified 2026-06-17.