CVE-2018-7185
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 6, 2018
Updated: Jan 14, 2025
Summary
CVE-2018-7185 is a denial-of-service vulnerability affecting the protocol engine in NTP (Network Time Protocol) version 4.2.6 before 4.2.8p11. An attacker can cause a disruption by sending packets with a zero-origin timestamp and the source IP address of the victim's side in an interleaved association. This action forces the victim ntpd to reset its association, resulting in a denial-of-service condition.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.