PT-2020-8985 · Ntp+4 · Ntp+4
Published
2019-05-30
·
Updated
2025-02-13
·
CVE-2018-8956
CVSS v2.0
5.8
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
ntp versions 4.2.8p10 through 4.2.8p13
Description
The issue allows remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.
Recommendations
For ntp versions 4.2.8p10 through 4.2.8p13, consider restricting access to the broadcast network to minimize the risk of exploitation. As a temporary workaround, restrict the use of soofed mode 3 and mode 5 packets until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Resource Exhaustion
Memory Leak
Use of Insufficiently Random Values
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Red Os
Suse
Ntp