CVE-2015-7853

CVE-2015-7853 is a critical vulnerability affecting NTP versions 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77, specifically within the refclock driver. A remote attacker can exploit a negative input value in the datalen parameter to achieve arbitrary code execution or cause a denial of service. With a CVSS score of 9.8, this vulnerability is highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.