CVE-2018-8956

🗓️ 06 May 2020 19:15:12Reported by [email protected]Type

ntpd vulnerability in NTP versions 4.2.8p10 to 4.2.8p1

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in Network Time Protocol (NTP)	7 Dec 202322:45	–	ibm
ATTACKERKB	CVE-2018-8956	6 May 202019:15	–	attackerkb
AstraLinux	Astra Linux - уязвимость в ntp	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol allows a attacker to cause a service failure.	9 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol allows a perpetrator to cause a service failure.	9 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NTP synchronization protocol lies in the use of insufficiently random values, which allows a perpetrator to cause a service failure.	23 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol allows a perpetrator to cause a service failure.	27 Mar 202500:00	–	bdu_fstec
Circl	CVE-2018-8956	6 May 202022:59	–	circl
CNVD	Network Time Protocol Input Validation Error Vulnerability	7 May 202000:00	–	cnvd
CVE	CVE-2018-8956	6 May 202018:03	–	cve

NVD

Node

ntp ntpMatch4.2.8p10

ntp ntpMatch4.2.8p11

ntp ntpMatch4.2.8p12

ntp ntpMatch4.2.8p13

Source	Link
security	www.security.netapp.com/advisory/ntap-20200518-0006/
tools	www.tools.ietf.org/html/rfc5905
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html
ntp	www.ntp.org/
nikhiltripathi	www.nikhiltripathi.in/NTP_attack.pdf
arxiv	www.arxiv.org/abs/2005.01783

21 Nov 2024 04:14Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25

CVSS 3.15.3

EPSS0.01954