← Back

CVE-2018-7184

nvd nist
Published: Mar 6, 2018Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.

Affected (23)

Show all products
Ntp: Ntp · Synology: Diskstation Manager, Router Manager, Skynas, Virtual Diskstation Manager, Vs960hd Firmware · Slackware: Slackware Linux · Canonical: Ubuntu Linux · Netapp: Cloud Backup, Steelstore Cloud Integrated Storage
Ntp
1 product
Ntp
Synology
5 products
Diskstation Manager
Router Manager
Skynas
Virtual Diskstation Manager
Vs960hd Firmware
Slackware
1 product
Slackware Linux
Canonical
1 product
Ubuntu Linux
Netapp
2 products
Cloud Backup
Steelstore Cloud Integrated Storage
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Ntp
Ntp
Version 4.2.8 p10
Ntp
Version 4.2.8 p4
Ntp
Version 4.2.8 p5
Ntp
Version 4.2.8 p6
Ntp
Version 4.2.8 p7
Ntp
Version 4.2.8 p8
Ntp
Version 4.2.8 p9
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Synology
Diskstation Manager
Version 5.2
Diskstation Manager
Version 6.0
Diskstation Manager
Version 6.1
Router Manager
Version 1.1
Skynas
All versions
Virtual Diskstation Manager
All versions
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Vs960hd Firmware
All versions
Configuration D
3 vulnerable
Vulnerable SoftwareAffected Versions
Slackware
Slackware Linux
Version 14.0
Slackware Linux
Version 14.1
Slackware Linux
Version 14.2
Configuration E
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 17.10
Ubuntu Linux
Version 18.04
Configuration F
2 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Steelstore Cloud Integrated Storage
All versions

References (20)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.