PT-2018-2211 · Ntp+5 · Ntp+5
Yihan Lian
·
Publicado
2018-03-04
·
Atualizado
2024-06-15
·
CVE-2018-7182
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ntp versions 4.2.8p6 through 4.2.8p10
Description
The issue is related to the
ctl getitem method in ntpd, which is part of the NTP protocol implementation. It involves a buffer read beyond its boundaries in memory. This can be exploited by a remote attacker using specially crafted mode 6 packets, potentially leading to a denial of service. Additionally, there's a concern about the failure to prevent Sybil attacks from authenticated peers, which could allow an attacker to bypass security restrictions and modify a victim's clock by creating multiple ephemeral associations.Recommendations
For versions 4.2.8p6 through 4.2.8p10, update to version 4.2.8p11 or later to resolve the issue.
As a temporary workaround, consider restricting access to mode 6 packets to minimize the risk of exploitation.
Restrict the ability to create multiple ephemeral associations to prevent Sybil attacks.
Exploit
Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Freebsd
Ibm Aix
Suse
Ubuntu
Ntp