A potential buffer overflow vulnerability exists in the refclock of ntpd. An invalid length provided by a hardware reference clock could cause a buffer overflow potentially resulting in memory being modified. A malicious reflock could provide a negative length to trigger this vulnerability. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7853
