CVE-2018-7185 : The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to ca

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

Published 2018-03-06 20:29:02

Updated 2025-01-14 19:29:56

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2018-7185

Oracle » Fujitsu M10-1 Firmware
Versions before (<) xcp2361
cpe:2.3:o:oracle:fujitsu_m10-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M10-1 » Version: N/A
Oracle » Fujitsu M10-1 Firmware
Versions before (<) xcp3070
cpe:2.3:o:oracle:fujitsu_m10-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M10-1 » Version: N/A
Oracle » Fujitsu M10-4 Firmware
Versions before (<) xcp2361
cpe:2.3:o:oracle:fujitsu_m10-4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M10-4 » Version: N/A
Oracle » Fujitsu M10-4 Firmware
Versions before (<) xcp3070
cpe:2.3:o:oracle:fujitsu_m10-4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M10-4 » Version: N/A
Oracle » Fujitsu M10-4s Firmware
Versions before (<) xcp2361
cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M10-4s » Version: N/A
Oracle » Fujitsu M10-4s Firmware
Versions before (<) xcp3070
cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M10-4s » Version: N/A
Oracle » Fujitsu M12-1 Firmware
Versions before (<) xcp2361
cpe:2.3:o:oracle:fujitsu_m12-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M12-1 » Version: N/A
Oracle » Fujitsu M12-1 Firmware
Versions before (<) xcp3070
cpe:2.3:o:oracle:fujitsu_m12-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M12-1 » Version: N/A
Oracle » Fujitsu M12-2 Firmware
Versions before (<) xcp2361
cpe:2.3:o:oracle:fujitsu_m12-2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M12-2 » Version: N/A
Oracle » Fujitsu M12-2 Firmware
Versions before (<) xcp3070
cpe:2.3:o:oracle:fujitsu_m12-2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M12-2 » Version: N/A
Oracle » Fujitsu M12-2s Firmware
Versions before (<) xcp3070
cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M12-2s » Version: N/A
Oracle » Fujitsu M12-2s Firmware
Versions before (<) xcp2361
cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Oracle » Fujitsu M12-2s » Version: N/A
NTP » NTP
Versions from including (>=) 4.2.6 and before (<) 4.2.8
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta1
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta2
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta3
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta4
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta5
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc3
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc3
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P4
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P5
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P6
cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P7
cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P8
cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P9
cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P10
cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 14.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 12.04 ESM Edition
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 16.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 18.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 17.10
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
Matching versions
Netapp » Solidfire » Version: N/A
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
Matching versions
Netapp » HCI » Version: N/A
cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:*
Matching versions
Synology » Router Manager
Versions from including (>=) 1.1 and before (<) 1.1.6-6931-3
cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*
Matching versions
Synology » Skynas
Versions before (<) 6.1.5-15254
cpe:2.3:a:synology:skynas:*:*:*:*:*:*:*:*
Matching versions
Synology » Virtual Diskstation Manager
Versions before (<) 6.1.6-15266
cpe:2.3:a:synology:virtual_diskstation_manager:*:*:*:*:*:*:*:*
Matching versions
Synology » Vs960hd Firmware
Versions before (<) 2.2.3-1505
cpe:2.3:o:synology:vs960hd_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Synology » Vs960hd » Version: N/A
Synology » Diskstation Manager
Versions from including (>=) 5.2 and before (<) 6.1.6-15266
cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*
Matching versions
HPE » Hpux-ntp
Versions before (<) c.4.2.8.4.0
cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2018-7185

Top countries where our scanners detected CVE-2018-7185

Top open port discovered on systems with this issue 21

IPs affected by CVE-2018-7185 9,778

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2018-7185!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2018-7185

EPSS FAQ

15.58%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-7185

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

References for CVE-2018-7185

https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc

Third Party Advisory

CVEs referencing this url
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Page not found | Oracle
Third Party Advisory

CVEs referencing this url
http://support.ntp.org/bin/view/Main/NtpBug3454

NtpBug3454 < Main < NTP
Mitigation;Vendor Advisory
https://usn.ubuntu.com/3707-2/

USN-3707-2: NTP vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/201805-12

NTP: Multiple vulnerabilities (GLSA 201805-12) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://www.synology.com/support/security/Synology_SA_18_13

Synology Inc.
Third Party Advisory

CVEs referencing this url
https://security.netapp.com/advisory/ntap-20180626-0001/

March 2018 Network Time Protocol Daemon (ntpd) Vulnerabilities in NetApp Products | NetApp Product Security
Third Party Advisory

CVEs referencing this url
http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html

Slackware Security Advisory - ntp Updates ≈ Packet Storm
Third Party Advisory;VDB Entry

CVEs referencing this url
http://www.securityfocus.com/bid/103339

NTP CVE-2018-7185 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

HPESBUX03962 rev.1 - HP-UX NTP service, multiple vulnerabilities
Third Party Advisory

CVEs referencing this url
https://usn.ubuntu.com/3707-1/

USN-3707-1: NTP vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/541824/100/0/threaded

SecurityFocus
Third Party Advisory;VDB Entry

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2018-7185

Products affected by CVE-2018-7185

Threat overview for CVE-2018-7185

Exploit prediction scoring system (EPSS) score for CVE-2018-7185

CVSS scores for CVE-2018-7185

References for CVE-2018-7185