Read the docs
TI-2018-05192 Aliases CVE-2018-7170GHSA-v9cv-3r4j-cx4j

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that…

Priority LOW 29Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Deferred Red Hat: fix deferred

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.

Why it matters now

EPSS 0.02686 85th percentileScored 2026-11-07
Fix Deferred Red Hat: fix deferred

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 30

CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*4.2.0 to before 4.2.8; 4.3.0 to before 4.3.92VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*4.2.8VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*4.2.8 p1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*4.2.8 p1-beta1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*4.2.8 p1-beta2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*4.2.8 p1-beta3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*4.2.8 p1-beta4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*4.2.8 p1-beta5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*4.2.8 p1-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*4.2.8 p1-rc2VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:* Versions 4.2.0 to before 4.2.8; 4.3.0 to before 4.3.92 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:* Versions 4.2.8 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:* Versions 4.2.8 p1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:* Versions 4.2.8 p1-beta1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:* Versions 4.2.8 p1-beta2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:* Versions 4.2.8 p1-beta3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:* Versions 4.2.8 p1-beta4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:* Versions 4.2.8 p1-beta5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:* Versions 4.2.8 p1-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:* Versions 4.2.8 p1-rc2 Vulnerable ·NTP Project
Show 20 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*4.2.8 p2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*4.2.8 p2-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*4.2.8 p2-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*4.2.8 p2-rc3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*4.2.8 p3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*4.2.8 p3-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*4.2.8 p3-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*4.2.8 p3-rc3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*4.2.8 p4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*4.2.8 p5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*4.2.8 p6VulnerableNTP Project
cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*1.1 to before 1.1.6-6931-3VulnerableSynology
cpe:2.3:a:synology:skynas:*:*:*:*:*:*:*:*before 6.1.5-15254VulnerableSynology
cpe:2.3:a:synology:virtual_diskstation_manager:*:*:*:*:*:*:*:*before 6.1.6-15266VulnerableSynology
cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*5.2 to before 6.1.6-15266VulnerableSynology
cpe:2.3:o:synology:vs960hd_firmware:*:*:*:*:*:*:*:*before 2.2.3-1505VulnerableSynology
cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*not specified by NVDRunning onSynology
cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*before c.4.2.8.4.0VulnerableHewlett Packard Enterprise (HPE)
  • cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:* Versions 4.2.8 p2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:* Versions 4.2.8 p2-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:* Versions 4.2.8 p2-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:* Versions 4.2.8 p2-rc3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:* Versions 4.2.8 p3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:* Versions 4.2.8 p3-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:* Versions 4.2.8 p3-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:* Versions 4.2.8 p3-rc3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:* Versions 4.2.8 p4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:* Versions 4.2.8 p5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:* Versions 4.2.8 p6 Vulnerable ·NTP Project
  • cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:* Versions 1.1 to before 1.1.6-6931-3 Vulnerable ·Synology
  • cpe:2.3:a:synology:skynas:*:*:*:*:*:*:*:* Versions before 6.1.5-15254 Vulnerable ·Synology
  • cpe:2.3:a:synology:virtual_diskstation_manager:*:*:*:*:*:*:*:* Versions before 6.1.6-15266 Vulnerable ·Synology
  • cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:* Versions 5.2 to before 6.1.6-15266 Vulnerable ·Synology
  • cpe:2.3:o:synology:vs960hd_firmware:*:*:*:*:*:*:*:* Versions before 2.2.3-1505 Vulnerable ·Synology
  • cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synology
  • cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:* Versions before c.4.2.8.4.0 Vulnerable ·Hewlett Packard Enterprise (HPE)

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 8AffectedNo fix yet: Fix deferred

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-7170
  2. 2026-10-03 Alias added: GHSA-v9cv-3r4j-cx4j

References

Advisory 8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences