NTP CVE-2018-7170 Incomplete Fix Remote Security Vulnerability
BID:103194
CVE-2018-7170 |Info
NTP CVE-2018-7170 Incomplete Fix Remote Security Vulnerability
| Bugtraq ID: | 103194 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2018-7170 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 27 2018 12:00AM |
| Updated: | Aug 15 2018 10:00AM |
| Credit: | Matthew Van Gundy of Cisco ASIG, and Stefan Moser. |
| Vulnerable: |
Oracle Solaris 11.3 NTP NTP 4.3.90 NTP NTP 4.3.25 NTP NTP 4.3 NTP NTP 4.2.8 NTP NTP 4.2.6 NTP NTP 4.2.5 p74 NTP NTP 4.2.5 p153 NTP NTP 4.2.5 p150 NTP NTP 4.2.4 p8 NTP NTP 4.2.4 p7-RC2 NTP NTP 4.2.4 p7 NTP NTP 4.2.4 p6 NTP NTP 4.2.4 p5 NTP NTP 4.2.4 p4 NTP NTP 4.2.2 p4 NTP NTP 4.2.2 p1 NTP NTP 4.1.2 NTP NTP 4.3.77 NTP NTP 4.3.70 NTP NTP 4.2.8p6 NTP NTP 4.2.8p5 NTP NTP 4.2.8p4 NTP NTP 4.2.8p3-RC1 NTP NTP 4.2.8p3 NTP NTP 4.2.8p2 NTP NTP 4.2.8p1 NTP NTP 4.2.7p385 NTP NTP 4.2.7p366 NTP NTP 4.2.7p22 NTP NTP 4.2.7p111 NTP NTP 4.2.7p11 NTP NTP 4.2.5p3 NTP NTP 4.2.5p203 NTP NTP 4.2.5p186 NTP NTP 4.2.0.a NTP NTP 4.0.90 IBM Vios 2.2.3 IBM Vios 2.2.1 4 IBM Vios 2.2 IBM Vios 2.2.4.0 IBM Vios 2.2.3.50 IBM Vios 2.2.3.4 IBM Vios 2.2.3.3 IBM Vios 2.2.3.2 IBM Vios 2.2.3.0 IBM Vios 2.2.2.6 IBM Vios 2.2.2.5 IBM Vios 2.2.2.4 IBM Vios 2.2.2.0 IBM Vios 2.2.1.3 IBM Vios 2.2.1.1 IBM Vios 2.2.1.0 IBM Vios 2.2.0.13 IBM Vios 2.2.0.12 IBM Vios 2.2.0.11 IBM Vios 2.2.0.10 IBM Aix 7.2 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 |
| Not Vulnerable: |
NTP NTP 4.3.92 NTP NTP 4.2.8p7 NTP NTP 4.2.8p11 |
Discussion
NTP CVE-2018-7170 Incomplete Fix Remote Security Vulnerability
NTP is prone to a remote security vulnerability.
Successful exploits will allow attackers to bypass certain security restrictions and perform some unauthorized actions to the application. This may aid in further attacks.
Versions prior to NTP 4.2.8p7 and 4.3.x versions prior to 4.3.92 are vulnerable.
NTP is prone to a remote security vulnerability.
Successful exploits will allow attackers to bypass certain security restrictions and perform some unauthorized actions to the application. This may aid in further attacks.
Versions prior to NTP 4.2.8p7 and 4.3.x versions prior to 4.3.92 are vulnerable.
Exploit / POC
NTP CVE-2018-7170 Incomplete Fix Remote Security Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
NTP CVE-2018-7170 Incomplete Fix Remote Security Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
NTP CVE-2018-7170 Incomplete Fix Remote Security Vulnerability
References:
References:
- Bug 1550214 - (CVE-2018-7170) CVE-2018-7170 ntp: Ephemeral association time spoo (Red Hat)
- NTP Homepage (ntp.org)
- NTP Bug 3415 Provide a way to prevent authenticated symmetric passive peering (NTP)
- Oracle Solaris Third Party Bulletin - April 2018 (Oracle)
- There are multiple vulnerabilities in NTPv3 and NTPv4 that affect AIX. (IBM)