GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2018:0956-1

Vulnerability from csaf_suse - Published: 2018-04-16 15:31 - Updated: 2018-04-16 15:31
Summary
Security update for ntp
Severity
Moderate
Notes
Title of the patch: Security update for ntp
Description of the patch: This update for ntp fixes the following issues: - Update to 4.2.8p11 (bsc#1082210): * CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. * CVE-2018-7182: ctl_getitem(): buffer read overrun leads to undefined behavior and information leak. (bsc#1083426) * CVE-2018-7170: Multiple authenticated ephemeral associations. (bsc#1083424) * CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state. (bsc#1083422) * CVE-2018-7185: Unauthenticated packet can reset authenticated interleaved association. (bsc#1083420) * CVE-2018-7183: ntpq:decodearr() can write beyond its buffer limit.(bsc#1083417) - Don't use libevent's cached time stamps in sntp. (bsc#1077445)
Patchnames: SUSE-SLE-DESKTOP-12-SP3-2018-648,SUSE-SLE-SERVER-12-SP3-2018-648
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2016-1549
6.5 (Medium)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64 —
Vendor Fix
Threats
Impact low
CVE-2018-7170
3.1 (Low)
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Affected products
Recommended 18 products, the same list as for CVE-2016-1549
Threats
Impact low
CVE-2018-7182
5.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Recommended 18 products, the same list as for CVE-2016-1549
Threats
Impact moderate
CVE-2018-7183
5 (Medium)
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Recommended 18 products, the same list as for CVE-2016-1549
Threats
Impact moderate
CVE-2018-7184
3.1 (Low)
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 18 products, the same list as for CVE-2016-1549
Threats
Impact low
CVE-2018-7185
3.1 (Low)
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 18 products, the same list as for CVE-2016-1549
Threats
Impact low
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1077445 self
https://bugzilla.suse.com/1082063 self
https://bugzilla.suse.com/1082210 self
https://bugzilla.suse.com/1083417 self
https://bugzilla.suse.com/1083420 self
https://bugzilla.suse.com/1083422 self
https://bugzilla.suse.com/1083424 self
https://bugzilla.suse.com/1083426 self
https://www.suse.com/security/cve/CVE-2016-1549/ self
https://www.suse.com/security/cve/CVE-2018-7170/ self
https://www.suse.com/security/cve/CVE-2018-7182/ self
https://www.suse.com/security/cve/CVE-2018-7183/ self
https://www.suse.com/security/cve/CVE-2018-7184/ self
https://www.suse.com/security/cve/CVE-2018-7185/ self
https://www.suse.com/security/cve/CVE-2016-1549 external
https://bugzilla.suse.com/1083424 external
https://bugzilla.suse.com/977446 external
https://bugzilla.suse.com/977451 external
https://www.suse.com/security/cve/CVE-2018-7170 external
https://bugzilla.suse.com/1082210 external
https://bugzilla.suse.com/1083424 external
https://bugzilla.suse.com/1087324 external
https://bugzilla.suse.com/1098531 external
https://bugzilla.suse.com/1155513 external
https://www.suse.com/security/cve/CVE-2018-7182 external
https://bugzilla.suse.com/1082210 external
https://bugzilla.suse.com/1083426 external
https://bugzilla.suse.com/1087324 external
https://www.suse.com/security/cve/CVE-2018-7183 external
https://bugzilla.suse.com/1082210 external
https://bugzilla.suse.com/1083417 external
https://bugzilla.suse.com/1087324 external
https://www.suse.com/security/cve/CVE-2018-7184 external
https://bugzilla.suse.com/1082210 external
https://bugzilla.suse.com/1083422 external
https://bugzilla.suse.com/1087324 external
https://www.suse.com/security/cve/CVE-2018-7185 external
https://bugzilla.suse.com/1082210 external
https://bugzilla.suse.com/1083420 external
https://bugzilla.suse.com/1087324 external
https://bugzilla.suse.com/1089405 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for ntp",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for ntp fixes the following issues:\n\n- Update to 4.2.8p11 (bsc#1082210):\n  * CVE-2016-1549: Sybil vulnerability: ephemeral association\n    attack. While fixed in ntp-4.2.8p7, there are significant\n    additional protections for this issue in 4.2.8p11.\n  * CVE-2018-7182: ctl_getitem(): buffer read overrun\n    leads to undefined behavior and information leak. (bsc#1083426)\n  * CVE-2018-7170: Multiple authenticated ephemeral\n    associations. (bsc#1083424)\n  * CVE-2018-7184: Interleaved symmetric mode cannot\n    recover from bad state. (bsc#1083422)\n  * CVE-2018-7185: Unauthenticated packet can reset\n    authenticated interleaved association. (bsc#1083420)\n  * CVE-2018-7183: ntpq:decodearr() can write beyond its\n    buffer limit.(bsc#1083417)\n- Don\u0027t use libevent\u0027s cached time stamps in sntp. (bsc#1077445)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP3-2018-648,SUSE-SLE-SERVER-12-SP3-2018-648",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_0956-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2018:0956-1",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20180956-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2018:0956-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2018-April/003894.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1077445",
        "url": "https://bugzilla.suse.com/1077445"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1082063",
        "url": "https://bugzilla.suse.com/1082063"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1082210",
        "url": "https://bugzilla.suse.com/1082210"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1083417",
        "url": "https://bugzilla.suse.com/1083417"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1083420",
        "url": "https://bugzilla.suse.com/1083420"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1083422",
        "url": "https://bugzilla.suse.com/1083422"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1083424",
        "url": "https://bugzilla.suse.com/1083424"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1083426",
        "url": "https://bugzilla.suse.com/1083426"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1549 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1549/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-7170 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-7170/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-7182 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-7182/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-7183 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-7183/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-7184 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-7184/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-7185 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-7185/"
      }
    ],
    "title": "Security update for ntp",
    "tracking": {
      "current_release_date": "2018-04-16T15:31:58Z",
      "generator": {
        "date": "2018-04-16T15:31:58Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2018:0956-1",
      "initial_release_date": "2018-04-16T15:31:58Z",
      "revision_history": [
        {
          "date": "2018-04-16T15:31:58Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p11-64.3.2.aarch64",
                "product": {
                  "name": "ntp-4.2.8p11-64.3.2.aarch64",
                  "product_id": "ntp-4.2.8p11-64.3.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p11-64.3.2.aarch64",
                "product": {
                  "name": "ntp-doc-4.2.8p11-64.3.2.aarch64",
                  "product_id": "ntp-doc-4.2.8p11-64.3.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p11-64.3.2.ppc64le",
                "product": {
                  "name": "ntp-4.2.8p11-64.3.2.ppc64le",
                  "product_id": "ntp-4.2.8p11-64.3.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p11-64.3.2.ppc64le",
                "product": {
                  "name": "ntp-doc-4.2.8p11-64.3.2.ppc64le",
                  "product_id": "ntp-doc-4.2.8p11-64.3.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p11-64.3.2.s390x",
                "product": {
                  "name": "ntp-4.2.8p11-64.3.2.s390x",
                  "product_id": "ntp-4.2.8p11-64.3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p11-64.3.2.s390x",
                "product": {
                  "name": "ntp-doc-4.2.8p11-64.3.2.s390x",
                  "product_id": "ntp-doc-4.2.8p11-64.3.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p11-64.3.2.x86_64",
                "product": {
                  "name": "ntp-4.2.8p11-64.3.2.x86_64",
                  "product_id": "ntp-4.2.8p11-64.3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p11-64.3.2.x86_64",
                "product": {
                  "name": "ntp-doc-4.2.8p11-64.3.2.x86_64",
                  "product_id": "ntp-doc-4.2.8p11-64.3.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP3",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p11-64.3.2.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64"
        },
        "product_reference": "ntp-4.2.8p11-64.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p11-64.3.2.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p11-64.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p11-64.3.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64"
        },
        "product_reference": "ntp-4.2.8p11-64.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p11-64.3.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le"
        },
        "product_reference": "ntp-4.2.8p11-64.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p11-64.3.2.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x"
        },
        "product_reference": "ntp-4.2.8p11-64.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p11-64.3.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64"
        },
        "product_reference": "ntp-4.2.8p11-64.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p11-64.3.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64"
        },
        "product_reference": "ntp-doc-4.2.8p11-64.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p11-64.3.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le"
        },
        "product_reference": "ntp-doc-4.2.8p11-64.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p11-64.3.2.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p11-64.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p11-64.3.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p11-64.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p11-64.3.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64"
        },
        "product_reference": "ntp-4.2.8p11-64.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p11-64.3.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le"
        },
        "product_reference": "ntp-4.2.8p11-64.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p11-64.3.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x"
        },
        "product_reference": "ntp-4.2.8p11-64.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p11-64.3.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64"
        },
        "product_reference": "ntp-4.2.8p11-64.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p11-64.3.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64"
        },
        "product_reference": "ntp-doc-4.2.8p11-64.3.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p11-64.3.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le"
        },
        "product_reference": "ntp-doc-4.2.8p11-64.3.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p11-64.3.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p11-64.3.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p11-64.3.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p11-64.3.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-1549",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1549"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim\u0027s clock.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1549",
          "url": "https://www.suse.com/security/cve/CVE-2016-1549"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083424 for CVE-2016-1549",
          "url": "https://bugzilla.suse.com/1083424"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977446 for CVE-2016-1549",
          "url": "https://bugzilla.suse.com/977446"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 977451 for CVE-2016-1549",
          "url": "https://bugzilla.suse.com/977451"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-04-16T15:31:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-1549"
    },
    {
      "cve": "CVE-2018-7170",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-7170"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim\u0027s clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-7170",
          "url": "https://www.suse.com/security/cve/CVE-2018-7170"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1082210 for CVE-2018-7170",
          "url": "https://bugzilla.suse.com/1082210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083424 for CVE-2018-7170",
          "url": "https://bugzilla.suse.com/1083424"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087324 for CVE-2018-7170",
          "url": "https://bugzilla.suse.com/1087324"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1098531 for CVE-2018-7170",
          "url": "https://bugzilla.suse.com/1098531"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1155513 for CVE-2018-7170",
          "url": "https://bugzilla.suse.com/1155513"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-04-16T15:31:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-7170"
    },
    {
      "cve": "CVE-2018-7182",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-7182"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-7182",
          "url": "https://www.suse.com/security/cve/CVE-2018-7182"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1082210 for CVE-2018-7182",
          "url": "https://bugzilla.suse.com/1082210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083426 for CVE-2018-7182",
          "url": "https://bugzilla.suse.com/1083426"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087324 for CVE-2018-7182",
          "url": "https://bugzilla.suse.com/1087324"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-04-16T15:31:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-7182"
    },
    {
      "cve": "CVE-2018-7183",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-7183"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-7183",
          "url": "https://www.suse.com/security/cve/CVE-2018-7183"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1082210 for CVE-2018-7183",
          "url": "https://bugzilla.suse.com/1082210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083417 for CVE-2018-7183",
          "url": "https://bugzilla.suse.com/1083417"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087324 for CVE-2018-7183",
          "url": "https://bugzilla.suse.com/1087324"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-04-16T15:31:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-7183"
    },
    {
      "cve": "CVE-2018-7184",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-7184"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the \"received\" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-7184",
          "url": "https://www.suse.com/security/cve/CVE-2018-7184"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1082210 for CVE-2018-7184",
          "url": "https://bugzilla.suse.com/1082210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083422 for CVE-2018-7184",
          "url": "https://bugzilla.suse.com/1083422"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087324 for CVE-2018-7184",
          "url": "https://bugzilla.suse.com/1087324"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-04-16T15:31:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-7184"
    },
    {
      "cve": "CVE-2018-7185",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-7185"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the \"other side\" of an interleaved association causing the victim ntpd to reset its association.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-7185",
          "url": "https://www.suse.com/security/cve/CVE-2018-7185"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1082210 for CVE-2018-7185",
          "url": "https://bugzilla.suse.com/1082210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083420 for CVE-2018-7185",
          "url": "https://bugzilla.suse.com/1083420"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087324 for CVE-2018-7185",
          "url": "https://bugzilla.suse.com/1087324"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1089405 for CVE-2018-7185",
          "url": "https://bugzilla.suse.com/1089405"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-4.2.8p11-64.3.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc-4.2.8p11-64.3.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-04-16T15:31:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-7185"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.