Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-7185

Опубликовано: 06 мар. 2018
Источник: ubuntu
Приоритет: low
CVSS2: 5
CVSS3: 7.5

Описание

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

РелизСтатусПримечание
artful

released

1:4.2.8p10+dfsg-5ubuntu3.3
bionic

released

1:4.2.8p10+dfsg-5ubuntu7.1
cosmic

released

1:4.2.8p11+dfsg-1ubuntu1
devel

released

1:4.2.8p11+dfsg-1ubuntu1
esm-apps/bionic

released

1:4.2.8p10+dfsg-5ubuntu7.1
esm-infra-legacy/trusty

released

1:4.2.6.p5+dfsg-3ubuntu2.14.04.13
esm-infra/xenial

released

1:4.2.8p4+dfsg-3ubuntu5.9
precise/esm

not-affected

1:4.2.6.p3+dfsg-1ubuntu3.12
trusty

released

1:4.2.6.p5+dfsg-3ubuntu2.14.04.13
trusty/esm

released

1:4.2.6.p5+dfsg-3ubuntu2.14.04.13

Показывать по

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 3.1
redhat
почти 8 лет назад

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

CVSS3: 7.5
nvd
почти 8 лет назад

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

CVSS3: 7.5
debian
почти 8 лет назад

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attac ...

CVSS3: 7.5
github
больше 3 лет назад

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

CVSS3: 5.3
fstec
почти 8 лет назад

Уязвимость реализации протокола синхронизации времени NTP, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании

5 Medium

CVSS2

7.5 High

CVSS3