7.5

CVE-2018-7185

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ntp ≫ Ntp Version >= 4.2.6 < 4.2.8
Ntp ≫ Ntp Version 4.2.8 Update -
Ntp ≫ Ntp Version 4.2.8 Update p1
Ntp ≫ Ntp Version 4.2.8 Update p1-beta1
Ntp ≫ Ntp Version 4.2.8 Update p1-beta2
Ntp ≫ Ntp Version 4.2.8 Update p1-beta3
Ntp ≫ Ntp Version 4.2.8 Update p1-beta4
Ntp ≫ Ntp Version 4.2.8 Update p1-beta5
Ntp ≫ Ntp Version 4.2.8 Update p1-rc1
Ntp ≫ Ntp Version 4.2.8 Update p1-rc2
Ntp ≫ Ntp Version 4.2.8 Update p10
Ntp ≫ Ntp Version 4.2.8 Update p2
Ntp ≫ Ntp Version 4.2.8 Update p2-rc1
Ntp ≫ Ntp Version 4.2.8 Update p2-rc2
Ntp ≫ Ntp Version 4.2.8 Update p2-rc3
Ntp ≫ Ntp Version 4.2.8 Update p3
Ntp ≫ Ntp Version 4.2.8 Update p3-rc1
Ntp ≫ Ntp Version 4.2.8 Update p3-rc2
Ntp ≫ Ntp Version 4.2.8 Update p3-rc3
Ntp ≫ Ntp Version 4.2.8 Update p4
Ntp ≫ Ntp Version 4.2.8 Update p5
Ntp ≫ Ntp Version 4.2.8 Update p6
Ntp ≫ Ntp Version 4.2.8 Update p7
Ntp ≫ Ntp Version 4.2.8 Update p8
Ntp ≫ Ntp Version 4.2.8 Update p9
Synology ≫ Router Manager Version >= 1.1 < 1.1.6-6931-3
Synology ≫ Skynas Version < 6.1.5-15254
Synology ≫ Virtual Diskstation Manager Version < 6.1.6-15266
Synology ≫ Diskstation Manager Version >= 5.2 < 6.1.6-15266
Synology ≫ Vs960hd Firmware Version < 2.2.3-1505
   Synology ≫ Vs960hd Version -
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 17.10
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Netapp ≫ Hci Version -
Netapp ≫ Solidfire Version -
Hpe ≫ Hpux-ntp Version < c.4.2.8.4.0
Oracle ≫ Fujitsu M10-1 Firmware Version < xcp2361
   Oracle ≫ Fujitsu M10-1 Version -
Oracle ≫ Fujitsu M10-4 Firmware Version < xcp2361
   Oracle ≫ Fujitsu M10-4 Version -
Oracle ≫ Fujitsu M10-4s Firmware Version < xcp2361
   Oracle ≫ Fujitsu M10-4s Version -
Oracle ≫ Fujitsu M12-1 Firmware Version < xcp2361
   Oracle ≫ Fujitsu M12-1 Version -
Oracle ≫ Fujitsu M12-2 Firmware Version < xcp2361
   Oracle ≫ Fujitsu M12-2 Version -
Oracle ≫ Fujitsu M12-2s Firmware Version < xcp2361
   Oracle ≫ Fujitsu M12-2s Version -
Oracle ≫ Fujitsu M10-1 Firmware Version < xcp3070
   Oracle ≫ Fujitsu M10-1 Version -
Oracle ≫ Fujitsu M10-4 Firmware Version < xcp3070
   Oracle ≫ Fujitsu M10-4 Version -
Oracle ≫ Fujitsu M10-4s Firmware Version < xcp3070
   Oracle ≫ Fujitsu M10-4s Version -
Oracle ≫ Fujitsu M12-1 Firmware Version < xcp3070
   Oracle ≫ Fujitsu M12-1 Version -
Oracle ≫ Fujitsu M12-2 Firmware Version < xcp3070
   Oracle ≫ Fujitsu M12-2 Version -
Oracle ≫ Fujitsu M12-2s Firmware Version < xcp3070
   Oracle ≫ Fujitsu M12-2s Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9% 0.948
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
Third Party Advisory
https://www.synology.com/support/security/Synology_SA_18_13
Third Party Advisory
https://usn.ubuntu.com/3707-2/
Third Party Advisory
http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/541824/100/0/threaded
Third Party Advisory
VDB Entry
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc
Third Party Advisory
https://security.gentoo.org/glsa/201805-12
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180626-0001/
Third Party Advisory
https://usn.ubuntu.com/3707-1/
Third Party Advisory
http://support.ntp.org/bin/view/Main/NtpBug3454
Vendor Advisory
Mitigation
http://www.securityfocus.com/bid/103339
Third Party Advisory
VDB Entry