CVE-2018-7185 The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address....
HighCVSS 7.5
EPSS 9.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p11+dfsg-1 | 1:4.2.8p11+dfsg-1 |
| ntp | >= 4.2.6, < 4.2.8 | 4.2.8 |
| ntp | = 4.2.8 | No fix listed |
| ntp | = 4.2.8-p1 | No fix listed |
| ntp | = 4.2.8-p1-beta1 | No fix listed |
| ntp | = 4.2.8-p1-beta2 | No fix listed |
| ntp | = 4.2.8-p1-beta3 | No fix listed |
| ntp | = 4.2.8-p1-beta4 | No fix listed |
| ntp | = 4.2.8-p1-beta5 | No fix listed |
| ntp | = 4.2.8-p1-rc1 | No fix listed |
| ntp | = 4.2.8-p1-rc2 | No fix listed |
| ntp | = 4.2.8-p10 | No fix listed |
| ntp | = 4.2.8-p2 | No fix listed |
| ntp | = 4.2.8-p2-rc1 | No fix listed |
| ntp | = 4.2.8-p2-rc2 | No fix listed |
| ntp | = 4.2.8-p2-rc3 | No fix listed |
| ntp | = 4.2.8-p3 | No fix listed |
| ntp | = 4.2.8-p3-rc1 | No fix listed |
| ntp | = 4.2.8-p3-rc2 | No fix listed |
| ntp | = 4.2.8-p3-rc3 | No fix listed |
| ntp | = 4.2.8-p4 | No fix listed |
| ntp | = 4.2.8-p5 | No fix listed |
| ntp | = 4.2.8-p6 | No fix listed |
| ntp | = 4.2.8-p7 | No fix listed |
| ntp | = 4.2.8-p8 | No fix listed |
Show 26 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ntp | = 4.2.8-p9 | No fix listed |
| Synology router manager | >= 1.1, < 1.1.6-6931-3 | 1.1.6-6931-3 |
| Synology skynas | < 6.1.5-15254 | 6.1.5-15254 |
| Synology virtual diskstation manager | < 6.1.6-15266 | 6.1.6-15266 |
| Synology diskstation manager | >= 5.2, < 6.1.6-15266 | 6.1.6-15266 |
| Synology vs960hd firmware | < 2.2.3-1505 | 2.2.3-1505 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.10 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| netapp hci | All versions | No fix listed |
| netapp solidfire | All versions | No fix listed |
| hpe hpux-ntp | < c.4.2.8.4.0 | c.4.2.8.4.0 |
| oracle fujitsu m10-1 firmware | < xcp2361 | xcp2361 |
| oracle fujitsu m10-1 firmware | < xcp3070 | xcp3070 |
| oracle fujitsu m10-4 firmware | < xcp2361 | xcp2361 |
| oracle fujitsu m10-4 firmware | < xcp3070 | xcp3070 |
| oracle fujitsu m10-4s firmware | < xcp2361 | xcp2361 |
| oracle fujitsu m10-4s firmware | < xcp3070 | xcp3070 |
| oracle fujitsu m12-1 firmware | < xcp2361 | xcp2361 |
| oracle fujitsu m12-1 firmware | < xcp3070 | xcp3070 |
| oracle fujitsu m12-2 firmware | < xcp2361 | xcp2361 |
| oracle fujitsu m12-2 firmware | < xcp3070 | xcp3070 |
| oracle fujitsu m12-2s firmware | < xcp2361 | xcp2361 |
| oracle fujitsu m12-2s firmware | < xcp3070 | xcp3070 |
References
- Debian Security Tracker CVE-2018-7185 vendor-advisory
- packetstormsecurity.com third-party-advisory vdb-entry
- support.ntp.org mitigation vendor-advisory
- 20180301 [Newsletter/Marketing] [slackware-security] ntp (SSA:2018-060-02) mailing-list third-party-advisory vdb-entry
- 103339 third-party-advisory vdb-entry
- FreeBSD-SA-18:02 third-party-advisory vendor-advisory
- GLSA-201805-12 third-party-advisory vendor-advisory
- security.netapp.com third-party-advisory
- support.hpe.com third-party-advisory
- USN-3707-1 third-party-advisory vendor-advisory
- USN-3707-2 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory
- www.synology.com third-party-advisory