CVE-2015-7976: Novell Suse Openstack Cloud

Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days.

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

Affected products

• Novell Suse Openstack Cloud: version 5 only
• Ntp Ntp: version 4.1.2 only; up to and including 4.2.8; version 4.3.0 only; version 4.3.1 only; version 4.3.2 only; version 4.3.3 only; …
• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.2 only
• Suse Linux Enterprise Debuginfo: version 11 only
• Suse Linux Enterprise Desktop: version 12 only
• Suse Linux Enterprise Server: version 10 only; version 11 only; version 12 only
• Suse Manager: version 2.1 only
• Suse Manager Proxy: version 2.1 only
• Suse Suse Linux Enterprise Server: version 12 only

Published 2017-01-30. Last modified 2026-06-17.