5.3

CVE-2018-7170

EPSS 0.7%
Veröffentlicht 06.03.2018 20:29:01
Zuletzt bearbeitet 14.01.2025 19:29:55
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ntp ≫ Ntp Version >= 4.2.0 < 4.2.8

Ntp ≫ Ntp Version >= 4.3.0 < 4.3.92

Ntp ≫ Ntp Version4.2.8 Update-

Ntp ≫ Ntp Version4.2.8 Updatep1

Ntp ≫ Ntp Version4.2.8 Updatep1-beta1

Ntp ≫ Ntp Version4.2.8 Updatep1-beta2

Ntp ≫ Ntp Version4.2.8 Updatep1-beta3

Ntp ≫ Ntp Version4.2.8 Updatep1-beta4

Ntp ≫ Ntp Version4.2.8 Updatep1-beta5

Ntp ≫ Ntp Version4.2.8 Updatep1-rc1

Ntp ≫ Ntp Version4.2.8 Updatep1-rc2

Ntp ≫ Ntp Version4.2.8 Updatep2

Ntp ≫ Ntp Version4.2.8 Updatep2-rc1

Ntp ≫ Ntp Version4.2.8 Updatep2-rc2

Ntp ≫ Ntp Version4.2.8 Updatep2-rc3

Ntp ≫ Ntp Version4.2.8 Updatep3

Ntp ≫ Ntp Version4.2.8 Updatep3-rc1

Ntp ≫ Ntp Version4.2.8 Updatep3-rc2

Ntp ≫ Ntp Version4.2.8 Updatep3-rc3

Ntp ≫ Ntp Version4.2.8 Updatep4

Ntp ≫ Ntp Version4.2.8 Updatep5

Ntp ≫ Ntp Version4.2.8 Updatep6

Synology ≫ Router Manager Version >= 1.1 < 1.1.6-6931-3

Synology ≫ Skynas Version < 6.1.5-15254

Synology ≫ Virtual Diskstation Manager Version < 6.1.6-15266

Synology ≫ Diskstation Manager Version >= 5.2 < 6.1.6-15266

Synology ≫ Vs960hd Firmware Version < 2.2.3-1505

Synology ≫ Vs960hd Version-

Netapp ≫ Hci Version-

Netapp ≫ Solidfire Version-

Hpe ≫ Hpux-ntp Version < c.4.2.8.4.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.7%	0.713

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.3	1.6	3.6	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

Third Party Advisory

https://www.synology.com/support/security/Synology_SA_18_13

Third Party Advisory

http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html

Third Party Advisory

VDB Entry

http://support.ntp.org/bin/view/Main/NtpBug3415

Third Party Advisory

http://www.securityfocus.com/archive/1/541824/100/0/threaded

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/103194

Third Party Advisory

VDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1550214

Third Party Advisory

Issue Tracking

https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc

Third Party Advisory

https://security.gentoo.org/glsa/201805-12

Third Party Advisory

https://security.netapp.com/advisory/ntap-20180626-0001/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-7170

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-7170

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-7170

EUVD