CVE-2018-7183

Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.

Link	Resource
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc	Third Party Advisory
http://support.ntp.org/bin/view/Main/SecurityNotice#February_2018_ntp_4_2_8p11_NTP_S	Vendor Advisory
http://support.ntp.org/bin/view/Main/NtpBug3414	Vendor Advisory
http://www.securityfocus.com/bid/103351	Third Party Advisory VDB Entry
https://www.synology.com/support/security/Synology_SA_18_13	Third Party Advisory
https://security.netapp.com/advisory/ntap-20180626-0001/	Third Party Advisory
https://usn.ubuntu.com/3707-1/	Third Party Advisory
https://security.gentoo.org/glsa/201805-12	Third Party Advisory
https://usn.ubuntu.com/3707-2/	Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
https://www.oracle.com//security-alerts/cpujul2021.html

Configuration 1

cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:* cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:* cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:* cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:* cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:10.3:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:* cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*

---

Published : 2018-03-08 08:29

Updated : 2021-07-20 11:15

---

NVD link : CVE-2018-7183

Mitre link : CVE-2018-7183

No products.

CWE-787