CVE-2018-7185
EUVD-2018-1892706.03.2018, 20:29
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ntp | ntp | 4.2.6 ≤ 𝑥 < 4.2.8 |
| ntp | ntp | 4.2.8 |
| ntp | ntp | 4.2.8:p1 |
| ntp | ntp | 4.2.8:p1-beta1 |
| ntp | ntp | 4.2.8:p1-beta2 |
| ntp | ntp | 4.2.8:p1-beta3 |
| ntp | ntp | 4.2.8:p1-beta4 |
| ntp | ntp | 4.2.8:p1-beta5 |
| ntp | ntp | 4.2.8:p1-rc1 |
| ntp | ntp | 4.2.8:p1-rc2 |
| ntp | ntp | 4.2.8:p10 |
| ntp | ntp | 4.2.8:p2 |
| ntp | ntp | 4.2.8:p2-rc1 |
| ntp | ntp | 4.2.8:p2-rc2 |
| ntp | ntp | 4.2.8:p2-rc3 |
| ntp | ntp | 4.2.8:p3 |
| ntp | ntp | 4.2.8:p3-rc1 |
| ntp | ntp | 4.2.8:p3-rc2 |
| ntp | ntp | 4.2.8:p3-rc3 |
| ntp | ntp | 4.2.8:p4 |
| ntp | ntp | 4.2.8:p5 |
| ntp | ntp | 4.2.8:p6 |
| ntp | ntp | 4.2.8:p7 |
| ntp | ntp | 4.2.8:p8 |
| ntp | ntp | 4.2.8:p9 |
| synology | router_manager | 1.1 ≤ 𝑥 < 1.1.6-6931-3 |
| synology | skynas | 𝑥 < 6.1.5-15254 |
| synology | virtual_diskstation_manager | 𝑥 < 6.1.6-15266 |
| synology | diskstation_manager | 5.2 ≤ 𝑥 < 6.1.6-15266 |
| synology | vs960hd_firmware | 𝑥 < 2.2.3-1505 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 17.10 |
| canonical | ubuntu_linux | 18.04 |
| netapp | hci | - |
| netapp | solidfire | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References