CVE-2018-8956
Fixed in a distro release EPSS 3%
ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.
Products: ntp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | ntp | 4.2.8.p14-1 |
| Debian 11 | ntp | 1:4.2.8p14+dfsg-1 |
| SUSE Enterprise Storage 5 | ntp | 4.2.8p15-88.1 |
| SUSE HPE Helion OpenStack 8 | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP1 | ntp | 4.2.8p15-4.10.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP2 | ntp | 4.2.8p15-4.10.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | ntp | 4.2.8p15-64.16.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Server 12 SP4 | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Server 12 SP5 | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Server 15-LTSS | ntp | 4.2.8p15-4.10.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | ntp | 4.2.8p15-88.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | ntp | 4.2.8p15-4.10.1 |
| SUSE OpenStack Cloud 7 | ntp | 4.2.8p15-88.1 |
| SUSE OpenStack Cloud 8 | ntp | 4.2.8p15-88.1 |
| SUSE OpenStack Cloud Crowbar 8 | ntp | 4.2.8p15-88.1 |
| Ubuntu 16.04 LTS | ntp | no fix |
| Ubuntu 22.04 LTS | ntp | no fix |
| Ubuntu Pro 14.04 LTS | ntp | no fix |
| Ubuntu Pro 18.04 LTS | ntp | no fix |
| Ubuntu Pro 20.04 LTS | ntp | no fix |
| openSUSE Leap 15.1 | ntp | 4.2.8p15-lp151.2.3.1 |
| openSUSE Leap 15.2 | ntp | 4.2.8p15-lp152.3.3.1 |
| openSUSE Tumbleweed | ntp | 4.2.8p15-7.2 |