CVE-2018-7185

ntp: Unauthenticated packet can reset authenticated interleaved association

Published Mar 6, 2018 CVSS 3.1 · 7.5 High EPSS 9.0% KEV · Not listed
Description
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Ubuntu USN Ubuntu USN USN-3707-1 NTP vulnerabilities
Ubuntu USN Ubuntu USN USN-3707-2 NTP vulnerabilities
History
Type Values Removed Values Added
CPEs cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:* cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*