CVE-2018-7182

The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.

Link	Resource
http://www.securityfocus.com/bid/103191	Third Party Advisory VDB Entry
http://support.ntp.org/bin/view/Main/NtpBug3412	Mitigation Vendor Advisory
http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html	Third Party Advisory VDB Entry
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc	Patch Third Party Advisory
https://www.synology.com/support/security/Synology_SA_18_13	Third Party Advisory
https://security.netapp.com/advisory/ntap-20180626-0001/	Third Party Advisory
https://usn.ubuntu.com/3707-1/	Third Party Advisory
http://www.securityfocus.com/archive/1/541824/100/0/threaded	Third Party Advisory VDB Entry
https://security.gentoo.org/glsa/201805-12	Third Party Advisory
https://www.exploit-db.com/exploits/45846/	Exploit Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

Configuration 1

cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:* cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:* cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:* cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:* cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*

---

Published : 2018-03-06 08:29

Updated : 2019-10-31 07:15

---

NVD link : CVE-2018-7182

Mitre link : CVE-2018-7182

No products.

CWE-125

Out-of-bounds Read