CVE-2018-12327
Fixed in a distro release EPSS 28%
Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.
Products: ntp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | ntp | 4.2.6p5-29.amzn2.0.1 |
| Amazon Linux 2 | ntp-doc | 4.2.6p5-29.amzn2.0.1 |
| Amazon Linux 2 | ntp-perl | 4.2.6p5-29.amzn2.0.1 |
| Amazon Linux 2 | ntpdate | 4.2.6p5-29.amzn2.0.1 |
| Amazon Linux 2 | sntp | 4.2.6p5-29.amzn2.0.1 |
| Arch Linux | ntp | 4.2.8.p12-1 |
| Debian 11 | ntp | no fix |
| Red Hat Enterprise Linux 6 | ntp | 0:4.2.6p5-15.el6_10 |
| Red Hat Enterprise Linux 6 | ntp-debuginfo | 0:4.2.6p5-15.el6_10 |
| Red Hat Enterprise Linux 6 | ntp-doc | 0:4.2.6p5-15.el6_10 |
| Red Hat Enterprise Linux 6 | ntp-perl | 0:4.2.6p5-15.el6_10 |
| Red Hat Enterprise Linux 6 | ntpdate | 0:4.2.6p5-15.el6_10 |
| Red Hat Enterprise Linux 7 | ntp | 0:4.2.6p5-29.el7 |
| Red Hat Enterprise Linux 7 | ntp-debuginfo | 0:4.2.6p5-29.el7 |
| Red Hat Enterprise Linux 7 | ntp-doc | 0:4.2.6p5-29.el7 |
| Red Hat Enterprise Linux 7 | ntp-perl | 0:4.2.6p5-29.el7 |
| Red Hat Enterprise Linux 7 | ntpdate | 0:4.2.6p5-29.el7 |
| Red Hat Enterprise Linux 7 | sntp | 0:4.2.6p5-29.el7 |
| Red Hat rhel eus 6.7 | ntp | 0:4.2.6p5-5.el6_7.6 |
| Red Hat rhel eus 6.7 | ntp-debuginfo | 0:4.2.6p5-5.el6_7.6 |
| Red Hat rhel eus 6.7 | ntp-doc | 0:4.2.6p5-5.el6_7.6 |
| Red Hat rhel eus 6.7 | ntp-perl | 0:4.2.6p5-5.el6_7.6 |
| Red Hat rhel eus 6.7 | ntpdate | 0:4.2.6p5-5.el6_7.6 |
| Red Hat rhel eus 7.6 | ntp | 0:4.2.6p5-28.el7_6.1 |
| Red Hat rhel eus 7.6 | ntp-debuginfo | 0:4.2.6p5-28.el7_6.1 |
| Red Hat rhel eus 7.6 | ntp-doc | 0:4.2.6p5-28.el7_6.1 |
| Red Hat rhel eus 7.6 | ntp-perl | 0:4.2.6p5-28.el7_6.1 |
| Red Hat rhel eus 7.6 | ntpdate | 0:4.2.6p5-28.el7_6.1 |
| Red Hat rhel eus 7.6 | sntp | 0:4.2.6p5-28.el7_6.1 |
| SUSE Enterprise Storage 4 | ntp | 4.2.8p12-64.8.2 |
| SUSE Linux Enterprise Desktop 12 SP3 | ntp | 4.2.8p12-64.8.2 |
| SUSE Linux Enterprise Module for Legacy 15 | ntp | 4.2.8p12-4.3.2 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | ntp | 4.2.8p12-48.21.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | ntp | 4.2.8p12-48.21.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | ntp | 4.2.8p12-48.21.1 |
| SUSE Linux Enterprise Server 11 SP4 | ntp | 4.2.8p12-64.7.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | ntp | 4.2.8p12-64.8.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | ntp | 4.2.8p12-64.8.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | ntp | 4.2.8p12-64.8.2 |
| SUSE Linux Enterprise Server 12 SP3 | ntp | 4.2.8p12-64.8.2 |
| SUSE Linux Enterprise Server 12-LTSS | ntp | 4.2.8p12-46.29.2 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | ntp | 4.2.8p12-64.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | ntp | 4.2.8p12-64.8.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | ntp | 4.2.8p12-64.8.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ntp | 4.2.8p12-64.8.2 |
| SUSE OpenStack Cloud 7 | ntp | 4.2.8p12-64.8.2 |
| Ubuntu 16.04 LTS | ntp | 1:4.2.8p4+dfsg-3ubuntu5.10 |
| Ubuntu Pro 14.04 LTS | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.13+esm1 |
| Ubuntu Pro 18.04 LTS | ntp | 1:4.2.8p10+dfsg-5ubuntu7.3+esm1 |
| openSUSE Tumbleweed | ntp | 4.2.8p15-7.2 |