{"action":"Upgrade ntp to 1:4.2.8p4+dfsg-1 or later.","affected":[{"fixed":"1:4.2.8p4+dfsg-1","introduced":"0"}],"component":"ntp","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":["1:4.2.8p4+dfsg-1"],"id":"tcs_01M5NB9YDVQ2QQCQJGZ22AAF12","modified_at":"2026-08-27T23:02:05.562540113Z","published_at":"2017-07-24T14:29:00.223Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-7703","https://security-tracker.debian.org/tracker/CVE-2015-7703"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-7703","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-7703"}],"summary":"The \"pidfile\" or \"driftfile\" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address tha"}