Skip to content
OpenAdvisories
Unscored USN-3707-1 4 CVEs

ntp vulnerabilities

Published Jul 9, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Yihan Lian discovered that NTP incorrectly handled certain malformed mode 6
packets. A remote attacker could possibly use this issue to cause ntpd to
crash, resulting in a denial of service. This issue only affected Ubuntu
17.10 and Ubuntu 18.04 LTS. (CVE-2018-7182)

Michael Macnair discovered that NTP incorrectly handled certain responses.
A remote attacker could possibly use this issue to execute arbitrary code.
(CVE-2018-7183)

Miroslav Lichvar discovered that NTP incorrectly handled certain
zero-origin timestamps. A remote attacker could possibly use this issue to
cause a denial of service. This issue only affected Ubuntu 17.10 and Ubuntu
18.04 LTS. (CVE-2018-7184)

Miroslav Lichvar discovered that NTP incorrectly handled certain
zero-origin timestamps. A remote attacker could possibly use this issue to
cause a denial of service. (CVE-2018-7185)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS ntp 1:4.2.6.p5+dfsg-3ubuntu2.14.04.13
Ubuntu · 16.04 LTS 16.04:LTS ntp 1:4.2.8p4+dfsg-3ubuntu5.9
Ubuntu · 18.04 LTS 18.04:LTS ntp 1:4.2.8p10+dfsg-5ubuntu7.1

Vulnerabilities 4

  • Unscored —
    CVE-2018-7182 Public exploit EPSS 29%

    The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out…

    ntp ntpsec Debian Ubuntu
  • Unscored —
    CVE-2018-7183 EPSS 10%

    Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute ar…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2018-7184

    ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote att…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2018-7185

    The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by…

    ntp ntp Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-7182
  • report
    https://ubuntu.com/security/CVE-2018-7183
  • report
    https://ubuntu.com/security/CVE-2018-7184
  • report
    https://ubuntu.com/security/CVE-2018-7185