Read the docs
TI-2018-05206 Aliases CVE-2018-7185GHSA-v5hv-rggx-r8xg

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a…

Priority MEDIUM 44Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Deferred Red Hat: fix deferred

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

Why it matters now

EPSS 0.08998 95th percentileScored 2026-11-07
Fix Deferred Red Hat: fix deferred

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 57

CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*4.2.6 to before 4.2.8VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*4.2.8VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*4.2.8 p1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*4.2.8 p1-beta1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*4.2.8 p1-beta2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*4.2.8 p1-beta3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*4.2.8 p1-beta4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*4.2.8 p1-beta5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*4.2.8 p1-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*4.2.8 p1-rc2VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:* Versions 4.2.6 to before 4.2.8 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:* Versions 4.2.8 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:* Versions 4.2.8 p1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:* Versions 4.2.8 p1-beta1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:* Versions 4.2.8 p1-beta2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:* Versions 4.2.8 p1-beta3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:* Versions 4.2.8 p1-beta4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:* Versions 4.2.8 p1-beta5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:* Versions 4.2.8 p1-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:* Versions 4.2.8 p1-rc2 Vulnerable ·NTP Project
Show 47 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:*4.2.8 p10VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*4.2.8 p2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*4.2.8 p2-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*4.2.8 p2-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*4.2.8 p2-rc3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*4.2.8 p3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*4.2.8 p3-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*4.2.8 p3-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*4.2.8 p3-rc3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*4.2.8 p4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*4.2.8 p5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*4.2.8 p6VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*4.2.8 p7VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*4.2.8 p8VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*4.2.8 p9VulnerableNTP Project
cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*1.1 to before 1.1.6-6931-3VulnerableSynology
cpe:2.3:a:synology:skynas:*:*:*:*:*:*:*:*before 6.1.5-15254VulnerableSynology
cpe:2.3:a:synology:virtual_diskstation_manager:*:*:*:*:*:*:*:*before 6.1.6-15266VulnerableSynology
cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*5.2 to before 6.1.6-15266VulnerableSynology
cpe:2.3:o:synology:vs960hd_firmware:*:*:*:*:*:*:*:*before 2.2.3-1505VulnerableSynology
cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*not specified by NVDRunning onSynology
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*12.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*17.10VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*before c.4.2.8.4.0VulnerableHewlett Packard Enterprise (HPE)
cpe:2.3:o:oracle:fujitsu_m10-1_firmware:*:*:*:*:*:*:*:*before xcp2361VulnerableOracle
cpe:2.3:h:oracle:fujitsu_m10-1:-:*:*:*:*:*:*:*not specified by NVDRunning onOracle
cpe:2.3:o:oracle:fujitsu_m10-4_firmware:*:*:*:*:*:*:*:*before xcp2361VulnerableOracle
cpe:2.3:h:oracle:fujitsu_m10-4:-:*:*:*:*:*:*:*not specified by NVDRunning onOracle
cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:*:*:*:*:*:*:*:*before xcp2361VulnerableOracle
cpe:2.3:h:oracle:fujitsu_m10-4s:-:*:*:*:*:*:*:*not specified by NVDRunning onOracle
cpe:2.3:o:oracle:fujitsu_m12-1_firmware:*:*:*:*:*:*:*:*before xcp2361VulnerableOracle
cpe:2.3:h:oracle:fujitsu_m12-1:-:*:*:*:*:*:*:*not specified by NVDRunning onOracle
cpe:2.3:o:oracle:fujitsu_m12-2_firmware:*:*:*:*:*:*:*:*before xcp2361VulnerableOracle
cpe:2.3:h:oracle:fujitsu_m12-2:-:*:*:*:*:*:*:*not specified by NVDRunning onOracle
cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:*:*:*:*:*:*:*:*before xcp2361VulnerableOracle
cpe:2.3:h:oracle:fujitsu_m12-2s:-:*:*:*:*:*:*:*not specified by NVDRunning onOracle
cpe:2.3:o:oracle:fujitsu_m10-1_firmware:*:*:*:*:*:*:*:*before xcp3070VulnerableOracle
cpe:2.3:o:oracle:fujitsu_m10-4_firmware:*:*:*:*:*:*:*:*before xcp3070VulnerableOracle
cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:*:*:*:*:*:*:*:*before xcp3070VulnerableOracle
cpe:2.3:o:oracle:fujitsu_m12-1_firmware:*:*:*:*:*:*:*:*before xcp3070VulnerableOracle
cpe:2.3:o:oracle:fujitsu_m12-2_firmware:*:*:*:*:*:*:*:*before xcp3070VulnerableOracle
cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:*:*:*:*:*:*:*:*before xcp3070VulnerableOracle
  • cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:* Versions 4.2.8 p10 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:* Versions 4.2.8 p2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:* Versions 4.2.8 p2-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:* Versions 4.2.8 p2-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:* Versions 4.2.8 p2-rc3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:* Versions 4.2.8 p3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:* Versions 4.2.8 p3-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:* Versions 4.2.8 p3-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:* Versions 4.2.8 p3-rc3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:* Versions 4.2.8 p4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:* Versions 4.2.8 p5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:* Versions 4.2.8 p6 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:* Versions 4.2.8 p7 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:* Versions 4.2.8 p8 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:* Versions 4.2.8 p9 Vulnerable ·NTP Project
  • cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:* Versions 1.1 to before 1.1.6-6931-3 Vulnerable ·Synology
  • cpe:2.3:a:synology:skynas:*:*:*:*:*:*:*:* Versions before 6.1.5-15254 Vulnerable ·Synology
  • cpe:2.3:a:synology:virtual_diskstation_manager:*:*:*:*:*:*:*:* Versions before 6.1.6-15266 Vulnerable ·Synology
  • cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:* Versions 5.2 to before 6.1.6-15266 Vulnerable ·Synology
  • cpe:2.3:o:synology:vs960hd_firmware:*:*:*:*:*:*:*:* Versions before 2.2.3-1505 Vulnerable ·Synology
  • cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synology
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* Versions 12.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* Versions 17.10 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:a:netapp:hci:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:* Versions before c.4.2.8.4.0 Vulnerable ·Hewlett Packard Enterprise (HPE)
  • cpe:2.3:o:oracle:fujitsu_m10-1_firmware:*:*:*:*:*:*:*:* Versions before xcp2361 Vulnerable ·Oracle
  • cpe:2.3:h:oracle:fujitsu_m10-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m10-4_firmware:*:*:*:*:*:*:*:* Versions before xcp2361 Vulnerable ·Oracle
  • cpe:2.3:h:oracle:fujitsu_m10-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:*:*:*:*:*:*:*:* Versions before xcp2361 Vulnerable ·Oracle
  • cpe:2.3:h:oracle:fujitsu_m10-4s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m12-1_firmware:*:*:*:*:*:*:*:* Versions before xcp2361 Vulnerable ·Oracle
  • cpe:2.3:h:oracle:fujitsu_m12-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m12-2_firmware:*:*:*:*:*:*:*:* Versions before xcp2361 Vulnerable ·Oracle
  • cpe:2.3:h:oracle:fujitsu_m12-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:*:*:*:*:*:*:*:* Versions before xcp2361 Vulnerable ·Oracle
  • cpe:2.3:h:oracle:fujitsu_m12-2s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m10-1_firmware:*:*:*:*:*:*:*:* Versions before xcp3070 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m10-4_firmware:*:*:*:*:*:*:*:* Versions before xcp3070 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m10-4s_firmware:*:*:*:*:*:*:*:* Versions before xcp3070 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m12-1_firmware:*:*:*:*:*:*:*:* Versions before xcp3070 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m12-2_firmware:*:*:*:*:*:*:*:* Versions before xcp3070 Vulnerable ·Oracle
  • cpe:2.3:o:oracle:fujitsu_m12-2s_firmware:*:*:*:*:*:*:*:* Versions before xcp3070 Vulnerable ·Oracle

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 8AffectedNo fix yet: Fix deferred
Not affected: 1 product
  • Red Hat Enterprise Linux 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-7185
  2. 2026-10-03 Alias added: GHSA-v5hv-rggx-r8xg

References

Advisory 10

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences