CVE-2018-8956

🗓️ 06 May 2020 18:03:41Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 176 Views

CVE-2018-8956: ntpd remote attackers issue

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in Network Time Protocol (NTP)	7 Dec 202322:45	–	ibm
ATTACKERKB	CVE-2018-8956	6 May 202019:15	–	attackerkb
AstraLinux	Astra Linux - уязвимость в ntp	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol allows a attacker to cause a service failure.	9 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol allows a perpetrator to cause a service failure.	9 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NTP synchronization protocol lies in the use of insufficiently random values, which allows a perpetrator to cause a service failure.	23 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol allows a perpetrator to cause a service failure.	27 Mar 202500:00	–	bdu_fstec
Circl	CVE-2018-8956	6 May 202022:59	–	circl
CNVD	Network Time Protocol Input Validation Error Vulnerability	7 May 202000:00	–	cnvd
Cvelist	CVE-2018-8956	6 May 202018:03	–	cvelist

NVD

Node

ntp ntpMatch4.2.8p10

OR

ntp ntpMatch4.2.8p11

OR

ntp ntpMatch4.2.8p12

OR

ntp ntpMatch4.2.8p13

Source	Link
nikhiltripathi	www.nikhiltripathi.in/NTP_attack.pdf
arxiv	www.arxiv.org/abs/2005.01783
tools	www.tools.ietf.org/html/rfc5905
security	www.security.netapp.com/advisory/ntap-20200518-0006/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html
ntp	www.ntp.org/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html

17 Jun 2026 02:05Current

6Medium risk

Vulners AI Score6

CVSS 25

CVSS 3.15.3

EPSS0.03079

cve ntpd remote attackers broadcast client ntp server mode 3 mode 5 packet capture