CVE-2018-7183
ntp: Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute...
CVE-2018-7183 is fixed in 3 products on 1 platform, first by ntp 1:4.2.8p10+dfsg-5ubuntu7.1, released March 7, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1021
95th percentile
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ntp · Ubuntu 18.04.6 LTS (bionic) | 1:4.2.8p10+dfsg-5ubuntu7.1 | ntp 1:4.2.8p10+dfsg-5ubuntu7.1 | Mar 7, 2018 |
| ntpdate · Ubuntu 18.04.6 LTS (bionic) | 1:4.2.8p10+dfsg-5ubuntu7.1 | ntpdate 1:4.2.8p10+dfsg-5ubuntu7.1 | Mar 7, 2018 |
| sntp · Ubuntu 18.04.6 LTS (bionic) | 1:4.2.8p10+dfsg-5ubuntu7.1 | sntp 1:4.2.8p10+dfsg-5ubuntu7.1 | Mar 7, 2018 |