← Vulnerability feed

Vulnerability record · CVE-2018-7170 · published 6 March 2018

CVE-2018-7170: Ntp vulnerability

Ntp · Ntp

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.

5.3 CVSS 3.1 Medium EPSS 2.7% · top 14.6%
5.3CVSS 3.1 base score, v2 3.5
2.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
9Affected product versions listed by NVD
20References
17 Jun 2026Last modified by NVD

Description

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

9 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html Third Party AdvisoryVDB Entry
http://support.ntp.org/bin/view/Main/NtpBug3415 Third Party Advisory
http://www.securityfocus.com/archive/1/541824/100/0/threaded Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/103194 Third Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1550214 Issue TrackingThird Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc Third Party Advisory
https://security.gentoo.org/glsa/201805-12 Third Party Advisory
https://security.netapp.com/advisory/ntap-20180626-0001/ Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us Third Party Advisory
https://www.synology.com/support/security/Synology_SA_18_13 Third Party Advisory
http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html Third Party AdvisoryVDB Entry
http://support.ntp.org/bin/view/Main/NtpBug3415 Third Party Advisory
http://www.securityfocus.com/archive/1/541824/100/0/threaded Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/103194 Third Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1550214 Issue TrackingThird Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc Third Party Advisory
https://security.gentoo.org/glsa/201805-12 Third Party Advisory
https://security.netapp.com/advisory/ntap-20180626-0001/ Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us Third Party Advisory
https://www.synology.com/support/security/Synology_SA_18_13 Third Party Advisory

Track CVE-2018-7170 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2021-22555Linux kernel netfilter x_tables heap out-of-bounds writeA heap out-of-bounds write exists in the Linux kernel netfilter x_tables code (net/netfilter/x_tables.c), present since v2.6.19-rc1. A local attacker…KEVEPSS 79%analysed7.8CVE-2021-3156Sudo off-by-one heap overflow allows root privilege escalationSudo before 1.9.5p2 contains an off-by-one error leading to a heap-based buffer overflow. Triggering it via 'sudoedit -s' with a command-line argumen…KEVEPSS 100%analysed7.8CVE-2019-2215Android Binder use-after-free allows kernel privilege escalationCVE-2019-2215 is a use-after-free in binder.c in the Android/Linux kernel that lets a local application escalate privileges to the kernel. It matters…KEVEPSS 72%analysed7.8CVE-2019-13272Linux kernel ptrace credential mishandling allows local root escalationThe Linux kernel before 5.1.17 mishandles credential recording in ptrace_link (kernel/ptrace.c) when a process creates a ptrace relationship, and als…KEVEPSS 52%analysed7.0CVE-2016-5195Linux Kernel Dirty COW Race Condition Privilege EscalationA race condition in the Linux kernel's mm/gup.c mishandles copy-on-write, letting a local user write to read-only memory mappings. This breaks the re…KEVEPSS 84%analysed10.0CVE-2013-6955Synology DSM imageSelector.cgi arbitrary file append and code executionSynology DiskStation Manager (DSM) versions 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 contain a flaw in webman/image…EPSS 85%analysed9.8CVE-2025-13392Synology diskstation manager vulnerabilityImproper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-…EPSS 0.53%9.8CVE-2024-10441Synology beestation os vulnerabilityImproper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskS…EPSS 1.2%

Source: NIST National Vulnerability Database (record CVE-2018-7170), CISA KEV, FIRST EPSS (scores of 2026-10-05). This page is refreshed as NVD updates the record.