7.5

CVE-2018-7185

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

Data is provided by the National Vulnerability Database (NVD)
Ntp ≫ Ntp Version >= 4.2.6 < 4.2.8
Ntp ≫ Ntp Version4.2.8 Update-
Ntp ≫ Ntp Version4.2.8 Updatep1
Ntp ≫ Ntp Version4.2.8 Updatep1-beta1
Ntp ≫ Ntp Version4.2.8 Updatep1-beta2
Ntp ≫ Ntp Version4.2.8 Updatep1-beta3
Ntp ≫ Ntp Version4.2.8 Updatep1-beta4
Ntp ≫ Ntp Version4.2.8 Updatep1-beta5
Ntp ≫ Ntp Version4.2.8 Updatep1-rc1
Ntp ≫ Ntp Version4.2.8 Updatep1-rc2
Ntp ≫ Ntp Version4.2.8 Updatep10
Ntp ≫ Ntp Version4.2.8 Updatep2
Ntp ≫ Ntp Version4.2.8 Updatep2-rc1
Ntp ≫ Ntp Version4.2.8 Updatep2-rc2
Ntp ≫ Ntp Version4.2.8 Updatep2-rc3
Ntp ≫ Ntp Version4.2.8 Updatep3
Ntp ≫ Ntp Version4.2.8 Updatep3-rc1
Ntp ≫ Ntp Version4.2.8 Updatep3-rc2
Ntp ≫ Ntp Version4.2.8 Updatep3-rc3
Ntp ≫ Ntp Version4.2.8 Updatep4
Ntp ≫ Ntp Version4.2.8 Updatep5
Ntp ≫ Ntp Version4.2.8 Updatep6
Ntp ≫ Ntp Version4.2.8 Updatep7
Ntp ≫ Ntp Version4.2.8 Updatep8
Ntp ≫ Ntp Version4.2.8 Updatep9
Synology ≫ Router Manager Version >= 1.1 < 1.1.6-6931-3
Synology ≫ Skynas Version < 6.1.5-15254
Synology ≫ Virtual Diskstation Manager Version < 6.1.6-15266
Synology ≫ Diskstation Manager Version >= 5.2 < 6.1.6-15266
Synology ≫ Vs960hd Firmware Version < 2.2.3-1505
   Synology ≫ Vs960hd Version-
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version17.10
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Netapp ≫ Hci Version-
Netapp ≫ Solidfire Version-
Hpe ≫ Hpux-ntp Version < c.4.2.8.4.0
Oracle ≫ Fujitsu M10-1 Firmware Version < xcp2361
   Oracle ≫ Fujitsu M10-1 Version-
Oracle ≫ Fujitsu M10-4 Firmware Version < xcp2361
   Oracle ≫ Fujitsu M10-4 Version-
Oracle ≫ Fujitsu M10-4s Firmware Version < xcp2361
   Oracle ≫ Fujitsu M10-4s Version-
Oracle ≫ Fujitsu M12-1 Firmware Version < xcp2361
   Oracle ≫ Fujitsu M12-1 Version-
Oracle ≫ Fujitsu M12-2 Firmware Version < xcp2361
   Oracle ≫ Fujitsu M12-2 Version-
Oracle ≫ Fujitsu M12-2s Firmware Version < xcp2361
   Oracle ≫ Fujitsu M12-2s Version-
Oracle ≫ Fujitsu M10-1 Firmware Version < xcp3070
   Oracle ≫ Fujitsu M10-1 Version-
Oracle ≫ Fujitsu M10-4 Firmware Version < xcp3070
   Oracle ≫ Fujitsu M10-4 Version-
Oracle ≫ Fujitsu M10-4s Firmware Version < xcp3070
   Oracle ≫ Fujitsu M10-4s Version-
Oracle ≫ Fujitsu M12-1 Firmware Version < xcp3070
   Oracle ≫ Fujitsu M12-1 Version-
Oracle ≫ Fujitsu M12-2 Firmware Version < xcp3070
   Oracle ≫ Fujitsu M12-2 Version-
Oracle ≫ Fujitsu M12-2s Firmware Version < xcp3070
   Oracle ≫ Fujitsu M12-2s Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 16.93% 0.948
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
https://usn.ubuntu.com/3707-2/
Third Party Advisory
https://usn.ubuntu.com/3707-1/
Third Party Advisory
http://www.securityfocus.com/bid/103339
Third Party Advisory
VDB Entry