CVE-2018-7185

—

CVSS 3.1

7.5 high

EPSS

9%p95

Published

Mar 6, 2018 (Mar 6, 2018)

Modified

Jun 17, 2026

Description

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

Vendors: ntp synology canonical netapp hpe oracle
Products: ntp, router manager, skynas, virtual diskstation manager, diskstation manager, vs960hd firmware, ubuntu linux, hci, solidfire, hpux-ntp, fujitsu m10-1 firmware, fujitsu m10-4 firmware
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (9.0%)

In the news0 stories

No ingested article mentions this CVE yet.