p PatchFirst

CVE-2018-7184

CVE-2018-7184

This page contains facts from public vulnerability sources. Check the original advisory before updating.

ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.

CVSS 7.5 · High · EPSS 8.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • ntp Debian:11

    Affected ranges
    • ECOSYSTEM: < 1:4.2.8p11+dfsg-1

    Update to 1:4.2.8p11+dfsg-1

  • ntp Ubuntu:18.04:LTS

    Versions
    • 1:4.2.8p10+dfsg-5ubuntu3
    • 1:4.2.8p10+dfsg-5ubuntu4
    • 1:4.2.8p10+dfsg-5ubuntu5
    • 1:4.2.8p10+dfsg-5ubuntu6
    • 1:4.2.8p10+dfsg-5ubuntu7
    Affected ranges
    • ECOSYSTEM: < 1:4.2.8p10+dfsg-5ubuntu7.1

    Update to 1:4.2.8p10+dfsg-5ubuntu7.1

Original sources

Check your server →