Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-7184

Опубликовано: 06 мар. 2018
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Средний

Описание

ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*
cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:synology:router_manager:1.1:*:*:*:*:*:*:*
cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*
cpe:2.3:a:synology:virtual_diskstation_manager:-:*:*:*:*:*:*:*
cpe:2.3:o:synology:diskstation_manager:5.2:*:*:*:*:*:*:*
cpe:2.3:o:synology:diskstation_manager:6.0:*:*:*:*:*:*:*
cpe:2.3:o:synology:diskstation_manager:6.1:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*
Конфигурация 4

Одно из

cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:*
cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:*
cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*
Конфигурация 5

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Конфигурация 6

Одно из

cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*

EPSS

Процентиль: 94%
0.13128
Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

ubuntu логотип

CVE-2018-7184

CVSS3: 7.5
ubuntu
почти 8 лет назад

ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.

redhat логотип

CVE-2018-7184

CVSS3: 3.1
redhat
почти 8 лет назад

ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.

debian логотип

CVE-2018-7184

CVSS3: 7.5
debian
почти 8 лет назад

ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating ...

github логотип

GHSA-rf4v-73h8-p6f7

CVSS3: 7.5
github
больше 3 лет назад

ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.

fstec логотип

BDU:2019-00218

CVSS3: 5.3
fstec
почти 8 лет назад

Уязвимость программы-демона ntpd реализации протокола синхронизации времени NTP, связанная с ошибками обработки входных данных, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 94%
0.13128
Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo