Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-7182

The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.

Published

2018-03-06T20:29:01.377

Last Modified

2024-11-21T04:11:44.437

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-125

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ntp	ntp	4.2.8	Yes
Application	ntp	ntp	4.2.8	Yes
Application	ntp	ntp	4.2.8	Yes
Application	ntp	ntp	4.2.8	Yes
Application	ntp	ntp	4.2.8	Yes
Operating System	canonical	ubuntu_linux	17.10	Yes
Operating System	canonical	ubuntu_linux	18.04	Yes
Application	netapp	element_software	-	Yes

References

http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html Third Party Advisory, VDB Entry ([email protected])
http://support.ntp.org/bin/view/Main/NtpBug3412 Mitigation, Vendor Advisory ([email protected])
http://www.securityfocus.com/archive/1/541824/100/0/threaded Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/103191 Third Party Advisory, VDB Entry ([email protected])
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc Patch, Third Party Advisory ([email protected])
https://security.gentoo.org/glsa/201805-12 Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20180626-0001/ Third Party Advisory ([email protected])
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us ([email protected])
https://usn.ubuntu.com/3707-1/ Third Party Advisory ([email protected])
https://www.exploit-db.com/exploits/45846/ Exploit, Third Party Advisory, VDB Entry ([email protected])
https://www.synology.com/support/security/Synology_SA_18_13 Third Party Advisory ([email protected])
http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://support.ntp.org/bin/view/Main/NtpBug3412 Mitigation, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/541824/100/0/threaded Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/103191 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/201805-12 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20180626-0001/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/3707-1/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/45846/ Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.synology.com/support/security/Synology_SA_18_13 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)