Buffer overflow in NTP
CVE-2018-12327
Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.280 (98.0th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.287 · newest: 0.280 · change: -0.007
Affected products
- NTP — versions 4.2.8
Weakness classification (CWE)
Public proof-of-concept exploits
References
- access.redhat.com/errata/RHSA-2018:3854 (vendor-advisory)
- gist.github.com/fakhrizulkifli/9b58ed8e0354e8deee50b0eebd1c011f (Exploit, Third Party Advisory)
- www.securityfocus.com/bid/104517 (VDB Entry, Third Party Advisory, vdb-entry)
- www.exploit-db.com/exploits/44909/ (Exploit, VDB Entry, Third Party Advisory, exploit)
- access.redhat.com/errata/RHSA-2018:3853 (vendor-advisory)
- security.gentoo.org/glsa/201903-15 (vendor-advisory)
- access.redhat.com/errata/RHSA-2019:2077 (vendor-advisory)
- support.hpe.com/hpsc/doc/public/display
- usn.ubuntu.com/4229-1/ (vendor-advisory)
Frequently asked questions
- What is CVE-2018-12327?
- CVE-2018-12327 is a critical-severity vulnerability in NTP, classified under Out-of-bounds Write. CVSS score: 9.8/10. Published 2018-06-20.
- How severe is CVE-2018-12327?
- Critical severity. CVSS v3 base score is 9.8 out of 10.
- Is CVE-2018-12327 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.