CVE-2018-7185
ntp: The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption)...
CVE-2018-7185 is fixed in 3 products on 1 platform, first by ntp 1:4.2.8p10+dfsg-5ubuntu7.1, released March 7, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0900
95th percentile
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ntp · Ubuntu 18.04.6 LTS (bionic) | 1:4.2.8p10+dfsg-5ubuntu7.1 | ntp 1:4.2.8p10+dfsg-5ubuntu7.1 | Mar 7, 2018 |
| ntpdate · Ubuntu 18.04.6 LTS (bionic) | 1:4.2.8p10+dfsg-5ubuntu7.1 | ntpdate 1:4.2.8p10+dfsg-5ubuntu7.1 | Mar 7, 2018 |
| sntp · Ubuntu 18.04.6 LTS (bionic) | 1:4.2.8p10+dfsg-5ubuntu7.1 | sntp 1:4.2.8p10+dfsg-5ubuntu7.1 | Mar 7, 2018 |