CVE-2018-7170 ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock sele...
MediumCVSS 5.3
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p11+dfsg-1 | 1:4.2.8p11+dfsg-1 |
| ntp | >= 4.2.0, < 4.2.8 | 4.2.8 |
| ntp | >= 4.3.0, < 4.3.92 | 4.3.92 |
| ntp | = 4.2.8 | No fix listed |
| ntp | = 4.2.8-p1 | No fix listed |
| ntp | = 4.2.8-p1-beta1 | No fix listed |
| ntp | = 4.2.8-p1-beta2 | No fix listed |
| ntp | = 4.2.8-p1-beta3 | No fix listed |
| ntp | = 4.2.8-p1-beta4 | No fix listed |
| ntp | = 4.2.8-p1-beta5 | No fix listed |
| ntp | = 4.2.8-p1-rc1 | No fix listed |
| ntp | = 4.2.8-p1-rc2 | No fix listed |
| ntp | = 4.2.8-p2 | No fix listed |
| ntp | = 4.2.8-p2-rc1 | No fix listed |
| ntp | = 4.2.8-p2-rc2 | No fix listed |
| ntp | = 4.2.8-p2-rc3 | No fix listed |
| ntp | = 4.2.8-p3 | No fix listed |
| ntp | = 4.2.8-p3-rc1 | No fix listed |
| ntp | = 4.2.8-p3-rc2 | No fix listed |
| ntp | = 4.2.8-p3-rc3 | No fix listed |
| ntp | = 4.2.8-p4 | No fix listed |
| ntp | = 4.2.8-p5 | No fix listed |
| ntp | = 4.2.8-p6 | No fix listed |
| Synology router manager | >= 1.1, < 1.1.6-6931-3 | 1.1.6-6931-3 |
| Synology skynas | < 6.1.5-15254 | 6.1.5-15254 |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Synology virtual diskstation manager | < 6.1.6-15266 | 6.1.6-15266 |
| Synology diskstation manager | >= 5.2, < 6.1.6-15266 | 6.1.6-15266 |
| Synology vs960hd firmware | < 2.2.3-1505 | 2.2.3-1505 |
| netapp hci | All versions | No fix listed |
| netapp solidfire | All versions | No fix listed |
| hpe hpux-ntp | < c.4.2.8.4.0 | c.4.2.8.4.0 |
References
- Debian Security Tracker CVE-2018-7170 vendor-advisory
- packetstormsecurity.com third-party-advisory vdb-entry
- support.ntp.org third-party-advisory
- 20180301 [Newsletter/Marketing] [slackware-security] ntp (SSA:2018-060-02) mailing-list third-party-advisory vdb-entry
- 103194 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- FreeBSD-SA-18:02 third-party-advisory vendor-advisory
- GLSA-201805-12 third-party-advisory vendor-advisory
- security.netapp.com third-party-advisory
- support.hpe.com third-party-advisory
- www.synology.com third-party-advisory