Test ID:	1.3.6.1.4.1.25623.1.0.812791
Category:	Denial of Service
Title:	NTP.org 'ntpd' 'received' Timestamp Denial of Service Vulnerability
Summary:	NTP.org's reference implementation of NTP server, ntpd is prone to a denial of service vulnerability.
Description:	Summary: NTP.org's reference implementation of NTP server, ntpd is prone to a denial of service vulnerability. Vulnerability Insight: The flaw exists because ntpd in ntp drops bad packets before updating the 'received' timestamp. Vulnerability Impact: Successful exploitation will allow remote attackers to cause a denial-of-service condition, denying service to legitimate users. Affected Software/OS: NTP.org's ntpd versions from 4.2.8p4 and before 4.2.8p11. Solution: Upgrade to NTP.org's ntpd version 4.2.8p11 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	BugTraq ID: 103192 Common Vulnerability Exposure (CVE) ID: CVE-2018-7184 http://www.securityfocus.com/bid/103192 Bugtraq: 20180301 [Newsletter/Marketing] [slackware-security] ntp (SSA:2018-060-02) (Google Search) http://www.securityfocus.com/archive/1/541824/100/0/threaded FreeBSD Security Advisory: FreeBSD-SA-18:02 https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc https://security.gentoo.org/glsa/201805-12 http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html https://usn.ubuntu.com/3707-1/
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.