CVE-2018-7184
High
Description
ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.
SeverityHigh
CVSS7.5
Exploit probability—
ProductNtp
PublishedMar 6, 2018
First seenMar 6, 2018
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ntp ntp | 4.2.8 | — |
| synology router_manager | 1.1 | — |
| synology skynas | No range specified | — |
| synology virtual_diskstation_manager | No range specified | — |
| synology diskstation_manager | 5.2, 6.0, 6.1 | — |
| synology vs960hd_firmware | No range specified | — |
| slackware slackware_linux | 14.0, 14.1, 14.2 | — |
| canonical ubuntu_linux | 14.04, 16.04, 17.10, 18.04 | — |
| netapp cloud_backup | No range specified | — |
| netapp steelstore_cloud_integrated_storage | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.