SUSE-SU-2018:1464-1
Vulnerability from csaf_suse - Published: 2018-05-29 14:44 - Updated: 2026-09-20 12:46Summary
Security update for ntp
Severity
Moderate
Notes
Title of the patch: Security update for ntp
Description of the patch: This update for ntp fixes the following issues:
- Update to 4.2.8p11 (bsc#1082210):
* CVE-2016-1549: Sybil vulnerability: ephemeral association
attack. While fixed in ntp-4.2.8p7, there are significant
additional protections for this issue in 4.2.8p11.
* CVE-2018-7182: ctl_getitem(): buffer read overrun
leads to undefined behavior and information leak. (bsc#1083426)
* CVE-2018-7170: Multiple authenticated ephemeral
associations. (bsc#1083424)
* CVE-2018-7184: Interleaved symmetric mode cannot
recover from bad state. (bsc#1083422)
* CVE-2018-7185: Unauthenticated packet can reset
authenticated interleaved association. (bsc#1083420)
* CVE-2018-7183: ntpq:decodearr() can write beyond its
buffer limit.(bsc#1083417)
- Don't use libevent's cached time stamps in sntp. (bsc#1077445)
- Fix systemd migration in %pre (bsc#1034892).
Patchnames: SUSE-SLE-SERVER-12-2018-1000
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.5 (Medium)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
24 products, the same list as for
CVE-2016-1549
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
24 products, the same list as for
CVE-2016-1549
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
24 products, the same list as for
CVE-2016-1549
Threats
Impact
moderate
Affected products
Recommended
24 products, the same list as for
CVE-2016-1549
Threats
Impact
low
Affected products
Recommended
24 products, the same list as for
CVE-2016-1549
Threats
Impact
low
References
46 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ntp",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for ntp fixes the following issues:\n\n- Update to 4.2.8p11 (bsc#1082210):\n * CVE-2016-1549: Sybil vulnerability: ephemeral association\n attack. While fixed in ntp-4.2.8p7, there are significant\n additional protections for this issue in 4.2.8p11.\n * CVE-2018-7182: ctl_getitem(): buffer read overrun\n leads to undefined behavior and information leak. (bsc#1083426)\n * CVE-2018-7170: Multiple authenticated ephemeral\n associations. (bsc#1083424)\n * CVE-2018-7184: Interleaved symmetric mode cannot\n recover from bad state. (bsc#1083422)\n * CVE-2018-7185: Unauthenticated packet can reset\n authenticated interleaved association. (bsc#1083420)\n * CVE-2018-7183: ntpq:decodearr() can write beyond its\n buffer limit.(bsc#1083417)\n- Don\u0027t use libevent\u0027s cached time stamps in sntp. (bsc#1077445)\n- Fix systemd migration in %pre (bsc#1034892).\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SERVER-12-2018-1000",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1464-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2018:1464-1",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181464-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2018:1464-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2018-May/004098.html"
},
{
"category": "self",
"summary": "SUSE Bug 1034892",
"url": "https://bugzilla.suse.com/1034892"
},
{
"category": "self",
"summary": "SUSE Bug 1077445",
"url": "https://bugzilla.suse.com/1077445"
},
{
"category": "self",
"summary": "SUSE Bug 1082063",
"url": "https://bugzilla.suse.com/1082063"
},
{
"category": "self",
"summary": "SUSE Bug 1082210",
"url": "https://bugzilla.suse.com/1082210"
},
{
"category": "self",
"summary": "SUSE Bug 1083417",
"url": "https://bugzilla.suse.com/1083417"
},
{
"category": "self",
"summary": "SUSE Bug 1083420",
"url": "https://bugzilla.suse.com/1083420"
},
{
"category": "self",
"summary": "SUSE Bug 1083422",
"url": "https://bugzilla.suse.com/1083422"
},
{
"category": "self",
"summary": "SUSE Bug 1083424",
"url": "https://bugzilla.suse.com/1083424"
},
{
"category": "self",
"summary": "SUSE Bug 1083426",
"url": "https://bugzilla.suse.com/1083426"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1549 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7170 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7182 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7183 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7184 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-7185 page",
"url": "https://www.suse.com/security/cve/CVE-2018-7185/"
}
],
"title": "Security update for ntp",
"tracking": {
"current_release_date": "2026-09-20T12:46:42Z",
"generator": {
"date": "2018-05-29T14:44:40Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2018:1464-1",
"initial_release_date": "2018-05-29T14:44:40Z",
"revision_history": [
{
"date": "2018-05-29T14:44:40Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T12:46:42Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ntp-0:4.2.8p11-46.26.2.ppc64le",
"product": {
"name": "ntp-0:4.2.8p11-46.26.2.ppc64le",
"product_id": "ntp-0:4.2.8p11-46.26.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ntp:ntp:4.2.8p11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ntp@4.2.8p11-46.26.2?arch=ppc64le\u0026upstream=ntp-0:4.2.8p11-46.26.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"product": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"product_id": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ntp:ntp:4.2.8p11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ntp-doc@4.2.8p11-46.26.2?arch=ppc64le\u0026upstream=ntp-0:4.2.8p11-46.26.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-0:4.2.8p11-46.26.2.s390x",
"product": {
"name": "ntp-0:4.2.8p11-46.26.2.s390x",
"product_id": "ntp-0:4.2.8p11-46.26.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ntp:ntp:4.2.8p11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ntp@4.2.8p11-46.26.2?arch=s390x\u0026upstream=ntp-0:4.2.8p11-46.26.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "ntp-doc-0:4.2.8p11-46.26.2.s390x",
"product": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.s390x",
"product_id": "ntp-doc-0:4.2.8p11-46.26.2.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ntp:ntp:4.2.8p11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ntp-doc@4.2.8p11-46.26.2?arch=s390x\u0026upstream=ntp-0:4.2.8p11-46.26.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-0:4.2.8p11-46.26.2.x86_64",
"product": {
"name": "ntp-0:4.2.8p11-46.26.2.x86_64",
"product_id": "ntp-0:4.2.8p11-46.26.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ntp:ntp:4.2.8p11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ntp@4.2.8p11-46.26.2?arch=x86_64\u0026upstream=ntp-0:4.2.8p11-46.26.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"product": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"product_id": "ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:ntp:ntp:4.2.8p11:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/ntp-doc@4.2.8p11-46.26.2?arch=x86_64\u0026upstream=ntp-0:4.2.8p11-46.26.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 12",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 12",
"product_id": "SUSE Linux Enterprise High Performance Computing 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.8p11-46.26.2.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64"
},
"product_reference": "ntp-0:4.2.8p11-46.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.8p11-46.26.2.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
},
"product_reference": "ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-1549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1549"
}
],
"notes": [
{
"category": "general",
"text": "A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim\u0027s clock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1549",
"url": "https://www.suse.com/security/cve/CVE-2016-1549"
},
{
"category": "external",
"summary": "SUSE Bug 1083424 for CVE-2016-1549",
"url": "https://bugzilla.suse.com/1083424"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2016-1549",
"url": "https://bugzilla.suse.com/977446"
},
{
"category": "external",
"summary": "SUSE Bug 977451 for CVE-2016-1549",
"url": "https://bugzilla.suse.com/977451"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T14:44:40Z",
"details": "moderate"
}
],
"title": "CVE-2016-1549"
},
{
"cve": "CVE-2018-7170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7170"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim\u0027s clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7170",
"url": "https://www.suse.com/security/cve/CVE-2018-7170"
},
{
"category": "external",
"summary": "SUSE Bug 1082210 for CVE-2018-7170",
"url": "https://bugzilla.suse.com/1082210"
},
{
"category": "external",
"summary": "SUSE Bug 1083424 for CVE-2018-7170",
"url": "https://bugzilla.suse.com/1083424"
},
{
"category": "external",
"summary": "SUSE Bug 1087324 for CVE-2018-7170",
"url": "https://bugzilla.suse.com/1087324"
},
{
"category": "external",
"summary": "SUSE Bug 1098531 for CVE-2018-7170",
"url": "https://bugzilla.suse.com/1098531"
},
{
"category": "external",
"summary": "SUSE Bug 1155513 for CVE-2018-7170",
"url": "https://bugzilla.suse.com/1155513"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T14:44:40Z",
"details": "low"
}
],
"title": "CVE-2018-7170"
},
{
"cve": "CVE-2018-7182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7182"
}
],
"notes": [
{
"category": "general",
"text": "The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7182",
"url": "https://www.suse.com/security/cve/CVE-2018-7182"
},
{
"category": "external",
"summary": "SUSE Bug 1082210 for CVE-2018-7182",
"url": "https://bugzilla.suse.com/1082210"
},
{
"category": "external",
"summary": "SUSE Bug 1083426 for CVE-2018-7182",
"url": "https://bugzilla.suse.com/1083426"
},
{
"category": "external",
"summary": "SUSE Bug 1087324 for CVE-2018-7182",
"url": "https://bugzilla.suse.com/1087324"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T14:44:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-7182"
},
{
"cve": "CVE-2018-7183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7183"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7183",
"url": "https://www.suse.com/security/cve/CVE-2018-7183"
},
{
"category": "external",
"summary": "SUSE Bug 1082210 for CVE-2018-7183",
"url": "https://bugzilla.suse.com/1082210"
},
{
"category": "external",
"summary": "SUSE Bug 1083417 for CVE-2018-7183",
"url": "https://bugzilla.suse.com/1083417"
},
{
"category": "external",
"summary": "SUSE Bug 1087324 for CVE-2018-7183",
"url": "https://bugzilla.suse.com/1087324"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T14:44:40Z",
"details": "moderate"
}
],
"title": "CVE-2018-7183"
},
{
"cve": "CVE-2018-7184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7184"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the \"received\" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7184",
"url": "https://www.suse.com/security/cve/CVE-2018-7184"
},
{
"category": "external",
"summary": "SUSE Bug 1082210 for CVE-2018-7184",
"url": "https://bugzilla.suse.com/1082210"
},
{
"category": "external",
"summary": "SUSE Bug 1083422 for CVE-2018-7184",
"url": "https://bugzilla.suse.com/1083422"
},
{
"category": "external",
"summary": "SUSE Bug 1087324 for CVE-2018-7184",
"url": "https://bugzilla.suse.com/1087324"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T14:44:40Z",
"details": "low"
}
],
"title": "CVE-2018-7184"
},
{
"cve": "CVE-2018-7185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-7185"
}
],
"notes": [
{
"category": "general",
"text": "The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the \"other side\" of an interleaved association causing the victim ntpd to reset its association.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-7185",
"url": "https://www.suse.com/security/cve/CVE-2018-7185"
},
{
"category": "external",
"summary": "SUSE Bug 1082210 for CVE-2018-7185",
"url": "https://bugzilla.suse.com/1082210"
},
{
"category": "external",
"summary": "SUSE Bug 1083420 for CVE-2018-7185",
"url": "https://bugzilla.suse.com/1083420"
},
{
"category": "external",
"summary": "SUSE Bug 1087324 for CVE-2018-7185",
"url": "https://bugzilla.suse.com/1087324"
},
{
"category": "external",
"summary": "SUSE Bug 1089405 for CVE-2018-7185",
"url": "https://bugzilla.suse.com/1089405"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise High Performance Computing 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12-LTSS:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-0:4.2.8p11-46.26.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-0:4.2.8p11-46.26.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2018-05-29T14:44:40Z",
"details": "low"
}
],
"title": "CVE-2018-7185"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.