← Back

CVE-2018-7170

nvd nist
Published: Mar 6, 2018Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 1.6 / Impact: 3.6
Source: NVD

Description

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.

Affected (30)

Show all products
Ntp: Ntp · Synology: Diskstation Manager, Router Manager, Skynas, Virtual Diskstation Manager, Vs960hd Firmware · Netapp: Hci, Solidfire · Hpe: Hpux Ntp
Ntp
1 product
Ntp
Synology
5 products
Diskstation Manager
Router Manager
Skynas
Virtual Diskstation Manager
Vs960hd Firmware
Netapp
2 products
Hci
Solidfire
Hpe
1 product
Hpux Ntp
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Ntp
Ntp
From 4.2.0 to 4.2.8
Ntp
From 4.3.0 to 4.3.92
Ntp
Version 4.2.8
Ntp
Version 4.2.8 p1-beta1
Ntp
Version 4.2.8 p1-beta2
Ntp
Version 4.2.8 p1-beta3
Ntp
Version 4.2.8 p1-beta4
Ntp
Version 4.2.8 p1-beta5
Ntp
Version 4.2.8 p1-rc1
Ntp
Version 4.2.8 p1-rc2
Ntp
Version 4.2.8 p1
Ntp
Version 4.2.8 p2-rc1
Ntp
Version 4.2.8 p2-rc2
Ntp
Version 4.2.8 p2-rc3
Ntp
Version 4.2.8 p2
Ntp
Version 4.2.8 p3-rc1
Ntp
Version 4.2.8 p3-rc2
Ntp
Version 4.2.8 p3-rc3
Ntp
Version 4.2.8 p3
Ntp
Version 4.2.8 p4
Ntp
Version 4.2.8 p5
Ntp
Version 4.2.8 p6
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Diskstation Manager
From 5.2 to 6.1.6-15266
Router Manager
From 1.1 to 1.1.6-6931-3
Skynas
Before 6.1.5-15254
Virtual Diskstation Manager
Before 6.1.6-15266
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vs960hd Firmware
Before 2.2.3-1505
Running on/withPlatform Versions
Synology
Vs960hd
All versions
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Hci
All versions
Solidfire
All versions
Configuration E
1 vulnerable
Vulnerable SoftwareAffected Versions
Hpux Ntp
Before c.4.2.8.4.0

References (20)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.