CVE-2018-7170

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral…

published March 6, 2018

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02686 · 85.7th percentile
Published
2018-03-06T20:00Z
EPSS history
Timeline
  • 06 MAR 20:00Z
    ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral…
    cvelistv5