CVE-2018-8956

ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP…

published May 6, 2020

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03144 · 87.8th percentile
Published
2020-05-06T18:03Z
EPSS history
Timeline
  • 06 MAY 18:03Z
    ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP…
    cvelistv5