CVE-2018-7185

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
References
Link Resource
http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html Third Party Advisory VDB Entry
http://support.ntp.org/bin/view/Main/NtpBug3454 Mitigation Vendor Advisory
http://www.securityfocus.com/archive/1/541824/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/103339 Third Party Advisory VDB Entry
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc Third Party Advisory
https://security.gentoo.org/glsa/201805-12 Third Party Advisory
https://security.netapp.com/advisory/ntap-20180626-0001/ Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us Third Party Advisory
https://usn.ubuntu.com/3707-1/ Third Party Advisory
https://usn.ubuntu.com/3707-2/ Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Third Party Advisory
https://www.synology.com/support/security/Synology_SA_18_13 Third Party Advisory
http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html Third Party Advisory VDB Entry
http://support.ntp.org/bin/view/Main/NtpBug3454 Mitigation Vendor Advisory
http://www.securityfocus.com/archive/1/541824/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/103339 Third Party Advisory VDB Entry
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc Third Party Advisory
https://security.gentoo.org/glsa/201805-12 Third Party Advisory
https://security.netapp.com/advisory/ntap-20180626-0001/ Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us Third Party Advisory
https://usn.ubuntu.com/3707-1/ Third Party Advisory
https://usn.ubuntu.com/3707-2/ Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Third Party Advisory
https://www.synology.com/support/security/Synology_SA_18_13 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:synology:skynas:*:*:*:*:*:*:*:*
cpe:2.3:a:synology:virtual_diskstation_manager:*:*:*:*:*:*:*:*
cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:synology:vs960hd_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*

Configuration 6 (hide)

cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m10-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m10-1:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m10-4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m10-4:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m10-4s:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m12-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m12-1:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m12-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m12-2:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m12-2s:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m10-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m10-1:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m10-4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m10-4:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m10-4s:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m12-1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m12-1:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m12-2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m12-2:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:fujitsu_m12-2s:-:*:*:*:*:*:*:*

History

14 Jan 2025, 19:29

Type Values Removed Values Added
CPE cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:* cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*

21 Nov 2024, 04:11

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html - Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html - Third Party Advisory, VDB Entry
References () http://support.ntp.org/bin/view/Main/NtpBug3454 - Mitigation, Vendor Advisory () http://support.ntp.org/bin/view/Main/NtpBug3454 - Mitigation, Vendor Advisory
References () http://www.securityfocus.com/archive/1/541824/100/0/threaded - Third Party Advisory, VDB Entry () http://www.securityfocus.com/archive/1/541824/100/0/threaded - Third Party Advisory, VDB Entry
References () http://www.securityfocus.com/bid/103339 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/103339 - Third Party Advisory, VDB Entry
References () https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc - Third Party Advisory () https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc - Third Party Advisory
References () https://security.gentoo.org/glsa/201805-12 - Third Party Advisory () https://security.gentoo.org/glsa/201805-12 - Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20180626-0001/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20180626-0001/ - Third Party Advisory
References () https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us - Third Party Advisory () https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us - Third Party Advisory
References () https://usn.ubuntu.com/3707-1/ - Third Party Advisory () https://usn.ubuntu.com/3707-1/ - Third Party Advisory
References () https://usn.ubuntu.com/3707-2/ - Third Party Advisory () https://usn.ubuntu.com/3707-2/ - Third Party Advisory
References () https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - Third Party Advisory () https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - Third Party Advisory
References () https://www.synology.com/support/security/Synology_SA_18_13 - Third Party Advisory () https://www.synology.com/support/security/Synology_SA_18_13 - Third Party Advisory

Information

Published : 2018-03-06 20:29

Updated : 2025-01-14 19:29


NVD link : CVE-2018-7185

Mitre link : CVE-2018-7185

CVE.ORG link : CVE-2018-7185


JSON object : View

Products Affected

ntp

  • ntp

synology

  • router_manager
  • vs960hd
  • diskstation_manager
  • skynas
  • virtual_diskstation_manager
  • vs960hd_firmware

oracle

  • fujitsu_m10-4_firmware
  • fujitsu_m10-4s
  • fujitsu_m10-1
  • fujitsu_m12-1
  • fujitsu_m12-2s
  • fujitsu_m12-2
  • fujitsu_m12-1_firmware
  • fujitsu_m10-4
  • fujitsu_m12-2s_firmware
  • fujitsu_m10-1_firmware
  • fujitsu_m10-4s_firmware
  • fujitsu_m12-2_firmware

canonical

  • ubuntu_linux

netapp

  • solidfire
  • hci

hpe

  • hpux-ntp