CVE-2018-7182
ntp: The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (o...
CVE-2018-7182 is fixed in 3 products on 1 platform, first by ntp 1:4.2.8p10+dfsg-5ubuntu7.1, released March 7, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.2883
98th percentile
The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ntp · Ubuntu 18.04.6 LTS (bionic) | 1:4.2.8p10+dfsg-5ubuntu7.1 | ntp 1:4.2.8p10+dfsg-5ubuntu7.1 | Mar 7, 2018 |
| ntpdate · Ubuntu 18.04.6 LTS (bionic) | 1:4.2.8p10+dfsg-5ubuntu7.1 | ntpdate 1:4.2.8p10+dfsg-5ubuntu7.1 | Mar 7, 2018 |
| sntp · Ubuntu 18.04.6 LTS (bionic) | 1:4.2.8p10+dfsg-5ubuntu7.1 | sntp 1:4.2.8p10+dfsg-5ubuntu7.1 | Mar 7, 2018 |