CVE-2018-7185

Published: Mar 6, 2018Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

Affected (50)

Products: Ntp: Ntp · Synology: Diskstation Manager, Router Manager, Skynas, Virtual Diskstation Manager, Vs960hd Firmware · Canonical: Ubuntu Linux · +3 more

Show all products

1 product

5 products

Virtual Diskstation Manager

1 product

2 products

1 product

6 products

Fujitsu M10 1 Firmware

Fujitsu M10 4 Firmware

Fujitsu M10 4s Firmware

Fujitsu M12 1 Firmware

Fujitsu M12 2 Firmware

Fujitsu M12 2s Firmware

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Ntp Ntp	From 4.2.6 to 4.2.8
Ntp Ntp	Version 4.2.8
Ntp Ntp	Version 4.2.8 p1-beta1
Ntp Ntp	Version 4.2.8 p1-beta2
Ntp Ntp	Version 4.2.8 p1-beta3
Ntp Ntp	Version 4.2.8 p1-beta4
Ntp Ntp	Version 4.2.8 p1-beta5
Ntp Ntp	Version 4.2.8 p1-rc1
Ntp Ntp	Version 4.2.8 p1-rc2
Ntp Ntp	Version 4.2.8 p10
Ntp Ntp	Version 4.2.8 p1
Ntp Ntp	Version 4.2.8 p2-rc1
Ntp Ntp	Version 4.2.8 p2-rc2
Ntp Ntp	Version 4.2.8 p2-rc3
Ntp Ntp	Version 4.2.8 p2
Ntp Ntp	Version 4.2.8 p3-rc1
Ntp Ntp	Version 4.2.8 p3-rc2
Ntp Ntp	Version 4.2.8 p3-rc3
Ntp Ntp	Version 4.2.8 p3
Ntp Ntp	Version 4.2.8 p4
Ntp Ntp	Version 4.2.8 p5
Ntp Ntp	Version 4.2.8 p6
Ntp Ntp	Version 4.2.8 p7
Ntp Ntp	Version 4.2.8 p8
Ntp Ntp	Version 4.2.8 p9

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Synology Diskstation Manager	From 5.2 to 6.1.6-15266
Synology Router Manager	From 1.1 to 1.1.6-6931-3
Synology Skynas	Before 6.1.5-15254
Synology Virtual Diskstation Manager	Before 6.1.6-15266

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Synology Vs960hd Firmware	Before 2.2.3-1505

Running on/with	Platform Versions
Synology Vs960hd	All versions

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 17.10
Canonical Ubuntu Linux	Version 18.04

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Netapp Hci	All versions
Netapp Solidfire	All versions

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Hpe Hpux Ntp	Before c.4.2.8.4.0

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Fujitsu M10 1 Firmware	Before xcp2361

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Fujitsu M10 4 Firmware	Before xcp2361

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Fujitsu M10 4s Firmware	Before xcp2361

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Fujitsu M12 1 Firmware	Before xcp2361

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Fujitsu M12 2 Firmware	Before xcp2361

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Fujitsu M12 2s Firmware	Before xcp2361

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Fujitsu M10 1 Firmware	Before xcp3070

Running on/with	Platform Versions
Oracle Fujitsu M10 1	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Fujitsu M10 4 Firmware	Before xcp3070

Running on/with	Platform Versions
Oracle Fujitsu M10 4	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Fujitsu M10 4s Firmware	Before xcp3070

Running on/with	Platform Versions
Oracle Fujitsu M10 4s	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Fujitsu M12 1 Firmware	Before xcp3070

Running on/with	Platform Versions
Oracle Fujitsu M12 1	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Fujitsu M12 2 Firmware	Before xcp3070

Running on/with	Platform Versions
Oracle Fujitsu M12 2	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Fujitsu M12 2s Firmware	Before xcp3070

Running on/with	Platform Versions
Oracle Fujitsu M12 2s	All versions

References (24)

http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://support.ntp.org/bin/view/Main/NtpBug3454

Source: cve@mitre.org

MitigationVendor Advisory

http://www.securityfocus.com/archive/1/541824/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/103339

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc

Source: cve@mitre.org

Third Party Advisory

https://security.gentoo.org/glsa/201805-12

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20180626-0001/

Source: cve@mitre.org

Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/3707-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/3707-2/

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Source: cve@mitre.org

Third Party Advisory

https://www.synology.com/support/security/Synology_SA_18_13

Source: cve@mitre.org

Third Party Advisory

http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html