The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol, related to key management errors, allows a perpetrator to compromise data integrity.

Network Time Protocol key management vulnerability allows a remote attacker to compromise data integrity.

Reporter	Title	Published	Views	Family All 113
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTP, OpenSSL and Intel CPU's affect IBM Netezza Firmware Diagnostics.	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTPv4 affect AIX (CVE-2018-12327, CVE-2018-7170)	14 Dec 201818:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTP affect QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for IBM BladeCenter and IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTP affect AIX	14 Aug 201821:30	–	ibm
FreeBSD	ntp -- multiple vulnerabilities	27 Feb 201800:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : ntp (ALAS-2018-1009)	11 May 201800:00	–	nessus
Tenable Nessus	Amazon Linux AMI : ntp (ALAS-2018-1009)	11 May 201800:00	–	nessus
Tenable Nessus	Amazon Linux AMI : ntp (ALAS-2018-1083)	20 Sep 201800:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : NTP vulnerability (K82570157)	3 Nov 202300:00	–	nessus
Tenable Nessus	Fedora 28 : ntp (2018-e585e25b72)	3 Jan 201900:00	–	nessus

Vulners

Node

network_time ntpRange4.2–4.2.8p7

network_time ntpRange4.3–4.3.92

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html
support	www.support.ntp.org/bin/view/Main/NtpBug3415
securityfocus	www.securityfocus.com/archive/1/541824/100/0/threaded
securityfocus	www.securityfocus.com/bid/103194
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-7170
security	www.security.freebsd.org/advisories/FreeBSD-SA-18:02.ntp.asc
security	www.security.gentoo.org/glsa/201805-12
security	www.security.netapp.com/advisory/ntap-20180626-0001
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-7170

21 Nov 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 23.5

CVSS 34.3

EPSS0.02704