CVE-2018-7183 Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted ar...
CriticalCVSS 9.8
EPSS 10.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p11+dfsg-1 | 1:4.2.8p11+dfsg-1 |
| ntp | = 4.2.8-p10 | No fix listed |
| ntp | = 4.2.8-p6 | No fix listed |
| ntp | = 4.2.8-p7 | No fix listed |
| ntp | = 4.2.8-p8 | No fix listed |
| ntp | = 4.2.8-p9 | No fix listed |
| freebsd | = 10.3 | No fix listed |
| freebsd | = 10.4 | No fix listed |
| freebsd | = 11.1 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.10 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| netapp element software | All versions | No fix listed |
References
- Debian Security Tracker CVE-2018-7183 vendor-advisory
- support.ntp.org vendor-advisory
- support.ntp.org vendor-advisory
- 103351 third-party-advisory vdb-entry
- FreeBSD-SA-18:02 third-party-advisory vendor-advisory
- GLSA-201805-12 third-party-advisory vendor-advisory
- security.netapp.com third-party-advisory
- support.hpe.com
- USN-3707-1 third-party-advisory vendor-advisory
- USN-3707-2 third-party-advisory vendor-advisory
- www.oracle.com
- www.synology.com third-party-advisory