{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2018-7185","sourceIdentifier":"cve@mitre.org","published":"2018-03-06T20:29:01.500","lastModified":"2026-06-17T02:02:45.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the \"other side\" of an interleaved association causing the victim ntpd to reset its association."},{"lang":"es","value":"El motor de protocolo en ntp, en versiones 4.2.6 anteriores a la 4.2.8p11, permite que atacantes remotos provoquen una denegación de servicio (interrupción) mediante el envío continuado de un paquete con una marca de tiempo zero-origin y la dirección IP de origen \"del otro lado\" de una asociación intercalada que provoca que el ntpd de la víctima restablezca su asociación."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.6","versionEndExcluding":"4.2.8","matchCriteriaId":"EB9B114E-15BF-4731-9296-A8F82591B418"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*","matchCriteriaId":"EEA51D83-5841-4335-AF07-7A43C118CAAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*","matchCriteriaId":"C855BBD2-2B38-4EFF-9DBE-CA61CCACD0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*","matchCriteriaId":"49ADE0C3-F75C-4EC0-8805-56013F0EB92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*","matchCriteriaId":"D8FF625A-EFA3-43D1-8698-4A37AE31A07C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*","matchCriteriaId":"E3B99BBD-97FE-4615-905A-A614592226F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*","matchCriteriaId":"E7A9AD3A-F030-4331-B52A-518BD963AB8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*","matchCriteriaId":"C293B8BE-6691-4944-BCD6-25EB98CABC73"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*","matchCriteriaId":"CEA650F8-2576-494A-A861-61572CA319D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*","matchCriteriaId":"4ED21EE8-7CBF-4BC5-BFC3-185D41296238"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:*","matchCriteriaId":"0BC62D4E-D519-458C-BE4E-10DDB73A97D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*","matchCriteriaId":"C76A0B44-13DE-4173-8D05-DA54F6A71759"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*","matchCriteriaId":"1450241C-2F6D-4122-B33C-D78D065BA403"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*","matchCriteriaId":"721AFD22-91D3-488E-A5E6-DD84C86E412B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*","matchCriteriaId":"8D6ADDB1-2E96-4FF6-AE95-4B06654D38B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*","matchCriteriaId":"41E44E9F-6383-4E12-AEDC-B653FEA77A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*","matchCriteriaId":"466D9A37-2658-4695-9429-0C6BF4A631C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*","matchCriteriaId":"99774181-5F12-446C-AC2C-DB1C52295EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*","matchCriteriaId":"4427EE6D-3F79-4FF5-B3EC-EE6BD01562CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*","matchCriteriaId":"99C71C00-7222-483B-AEFB-159337BD3C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*","matchCriteriaId":"75A9AA28-1B20-44BB-815C-7294A53E910E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*","matchCriteriaId":"8C213794-111D-41F3-916C-AD97F731D600"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*","matchCriteriaId":"50811A7B-0379-4437-8737-B4C1ACBC9EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*","matchCriteriaId":"F12E4CF5-536C-416B-AD8D-6AE7CBE22C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*","matchCriteriaId":"EE002C76-406D-4F22-B738-E17BDEA70BCC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1","versionEndExcluding":"1.1.6-6931-3","matchCriteriaId":"B7B0AEDA-4FC3-4AD8-ADE3-356A4498AF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:skynas:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.5-15254","matchCriteriaId":"C114627A-7D1E-4B0C-B004-9CFAC78F2F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:virtual_diskstation_manager:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.6-15266","matchCriteriaId":"E65C1F9D-C457-49E8-A46B-9B15D5FCE5C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2","versionEndExcluding":"6.1.6-15266","matchCriteriaId":"B270650E-B819-4CE6-B129-BF90CE8B2A03"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:synology:vs960hd_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.3-1505","matchCriteriaId":"2A606357-7469-43AD-8B5A-152C43D017DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*","matchCriteriaId":"1CCBDFF9-AF42-4681-879B-CF789EBAD130"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*","matchCriteriaId":"9070C9D8-A14A-467F-8253-33B966C16886"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:*","matchCriteriaId":"8A6E548F-62E9-40CB-85DA-FDAA0F0096C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*","matchCriteriaId":"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*","versionEndExcluding":"c.4.2.8.4.0","matchCriteriaId":"F1A1FDA7-BE46-4FAB-A3FD-9A40C770C4AB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m10-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"C32584F2-910F-40D2-B6EE-EA4D23E10093"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m10-1:-:*:*:*:*:*:*:*","matchCriteriaId":"0F63BFBA-A4D8-43D1-A13E-DEED6AEF596B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m10-4_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"D512DA28-0734-43F5-A2F8-0828AE02AC9A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m10-4:-:*:*:*:*:*:*:*","matchCriteriaId":"D4BB5347-D09D-4FC5-9F1C-7F3E036C18AD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"E5262B15-F2CC-4E49-A5C3-DA8AC77EE93F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m10-4s:-:*:*:*:*:*:*:*","matchCriteriaId":"529D4274-F33B-47C7-A3FB-6F86096FD955"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m12-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"DA7AD36E-DC2F-400B-A3CC-8E3410C65316"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m12-1:-:*:*:*:*:*:*:*","matchCriteriaId":"A534E662-66B7-448B-A763-6B043112C877"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m12-2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"3179F5BF-7A7E-4C2C-A8A0-D8918C8FF809"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m12-2:-:*:*:*:*:*:*:*","matchCriteriaId":"95541D18-5C33-49E9-924D-0B21162EC2C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"2AA98A6E-9490-4824-9ED3-3D72F63E8D43"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m12-2s:-:*:*:*:*:*:*:*","matchCriteriaId":"22FD4F61-0A4F-4C74-A852-B1CD3639E1D8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m10-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3070","matchCriteriaId":"BB5D9B37-5071-407B-A717-B686786226B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m10-1:-:*:*:*:*:*:*:*","matchCriteriaId":"0F63BFBA-A4D8-43D1-A13E-DEED6AEF596B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m10-4_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3070","matchCriteriaId":"562A7D6E-B216-4182-A5FB-4AFE811CE601"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m10-4:-:*:*:*:*:*:*:*","matchCriteriaId":"D4BB5347-D09D-4FC5-9F1C-7F3E036C18AD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3070","matchCriteriaId":"4FE144E5-A9AA-4688-880A-5001AB418010"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m10-4s:-:*:*:*:*:*:*:*","matchCriteriaId":"529D4274-F33B-47C7-A3FB-6F86096FD955"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m12-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3070","matchCriteriaId":"A56DEDA3-5B9D-4FF3-B681-7F052AE9891D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m12-1:-:*:*:*:*:*:*:*","matchCriteriaId":"A534E662-66B7-448B-A763-6B043112C877"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m12-2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3070","matchCriteriaId":"B775A394-D1BB-4558-8DFC-8B99195EEF6D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m12-2:-:*:*:*:*:*:*:*","matchCriteriaId":"95541D18-5C33-49E9-924D-0B21162EC2C4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3070","matchCriteriaId":"10A49B2E-A679-4D8F-A027-570A7DE83134"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:fujitsu_m12-2s:-:*:*:*:*:*:*:*","matchCriteriaId":"22FD4F61-0A4F-4C74-A852-B1CD3639E1D8"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.ntp.org/bin/view/Main/NtpBug3454","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/541824/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/103339","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201805-12","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180626-0001/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03962en_us","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3707-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3707-2/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.synology.com/support/security/Synology_SA_18_13","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.ntp.org/bin/view/Main/NtpBug3454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/541824/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/103339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201805-12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180626-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03962en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3707-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3707-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.synology.com/support/security/Synology_SA_18_13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}