{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2018-7184","sourceIdentifier":"cve@mitre.org","published":"2018-03-06T20:29:01.437","lastModified":"2026-06-17T02:02:45.553","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the \"received\" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704."},{"lang":"es","value":"ntpd en ntp, en versiones 4.2.8p4 anteriores a la 4.2.8p11, envía paquetes malos antes de actualizar la marca de tiempo \"received\". Esto permite que atacantes remotos provoquen una denegación de servicio (interrupción) mediante el envío de un paquete con una marca de tiempo zero-origin que provoca que la asociación se restablezca y establezca el contenido del paquete como la marca de tiempo más reciente. Este problema es el resultado de una solución incompleta para CVE-2015-7704."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:*","matchCriteriaId":"0BC62D4E-D519-458C-BE4E-10DDB73A97D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*","matchCriteriaId":"99C71C00-7222-483B-AEFB-159337BD3C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*","matchCriteriaId":"75A9AA28-1B20-44BB-815C-7294A53E910E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*","matchCriteriaId":"8C213794-111D-41F3-916C-AD97F731D600"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*","matchCriteriaId":"50811A7B-0379-4437-8737-B4C1ACBC9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*","matchCriteriaId":"F12E4CF5-536C-416B-AD8D-6AE7CBE22C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*","matchCriteriaId":"EE002C76-406D-4F22-B738-E17BDEA70BCC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synology:router_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"46261C28-E276-4639-BA3D-A735B02599F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*","matchCriteriaId":"7C997777-BE79-4F77-90D7-E1A71D474D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:virtual_diskstation_manager:-:*:*:*:*:*:*:*","matchCriteriaId":"F5342AD6-8273-4215-BA0F-1457A628DB14"},{"vulnerable":true,"criteria":"cpe:2.3:o:synology:diskstation_manager:5.2:*:*:*:*:*:*:*","matchCriteriaId":"01527614-8A68-48DC-B0A0-F4AA99489221"},{"vulnerable":true,"criteria":"cpe:2.3:o:synology:diskstation_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"65372FA7-B54B-4298-99BF-483E9FEBA253"},{"vulnerable":true,"criteria":"cpe:2.3:o:synology:diskstation_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"3D04EA1A-F8E0-415B-8786-1C8C0F08E132"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3D0C5120-B961-440F-B454-584BC54B549C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:*","matchCriteriaId":"936EF68B-2A93-402C-BED4-20E6EDB2F102"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:*","matchCriteriaId":"F1B46F08-93A8-49D9-AC5D-43E19C062FFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:14.2:*:*:*:*:*:*:*","matchCriteriaId":"D65ED7B3-FD80-4D2B-B11D-AAABB34C49CA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*","matchCriteriaId":"9070C9D8-A14A-467F-8253-33B966C16886"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*","matchCriteriaId":"5C2089EE-5D7F-47EC-8EA5-0F69790564C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*","matchCriteriaId":"E94F7F59-1785-493F-91A7-5F5EA5E87E4D"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.ntp.org/bin/view/Main/NtpBug3453","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/541824/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/103192","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201805-12","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180626-0001/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03962en_us","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/3707-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.synology.com/support/security/Synology_SA_18_13","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.ntp.org/bin/view/Main/NtpBug3453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/541824/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/103192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201805-12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180626-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03962en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3707-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.synology.com/support/security/Synology_SA_18_13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}