The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade ntp | May 11, 2018 | Mar 6, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 6, 2018 |
| Debian | — | Upgrade ntp | Jul 30, 2024 | Mar 6, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 10, 2018 |
| Freebsd | — | Upgrade FreeBSDUpgrade ntpUpgrade ntp-devel | May 6, 2018 | Feb 28, 2018 |
| Gentoo Linux | — | Upgrade net-misc/ntp. | May 29, 2018 | Mar 6, 2018 |
| Hpux | — | Update NTP to the latest version | Dec 9, 2019 | Mar 6, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ntpdateUpgrade ntp | Jul 23, 2019 | Mar 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sntpUpgrade ntpUpgrade ntpdate | Sep 25, 2019 | Mar 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ntpdateUpgrade ntpUpgrade sntp | May 1, 2019 | Mar 6, 2018 |
| Ibm Aix | — | Apply the fix or workaround for ntp_advisory10 | Aug 16, 2018 | Mar 6, 2018 |
| Ntp | — | Upgrade NTP to version 4.2.8 | Feb 23, 2023 | Mar 6, 2018 |
| Oracle Solaris | — | Upgrade service/network/ntp to version 4.2.8.11-0.175.3.31.0.4.0 on Solaris 11.3 | Apr 18, 2018 | Mar 6, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 6, 2018 |
| Suse | — | Upgrade ntpUpgrade ntp-doc | Mar 27, 2018 | Mar 6, 2018 |
| Ubuntu | — | Upgrade ntp | Jul 13, 2018 | Mar 6, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub