Home

CVE-2018-12327

Description

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
13.692

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2018:3854) ntp security update ntp-4.2.6p5-15.el6_10.i686.rpmLinux
(RHSA-2018:3854) ntp security update ntp-4.2.6p5-15.el6_10.x86_64.rpmLinux
(RHSA-2018:3854) ntp security update ntp-doc-4.2.6p5-15.el6_10.noarch.rpmLinux
(RHSA-2018:3854) ntp security update ntp-perl-4.2.6p5-15.el6_10.i686.rpmLinux
(RHSA-2018:3854) ntp security update ntp-perl-4.2.6p5-15.el6_10.x86_64.rpmLinux
(RHSA-2018:3854) ntp security update ntpdate-4.2.6p5-15.el6_10.i686.rpmLinux
(RHSA-2018:3854) ntp security update ntpdate-4.2.6p5-15.el6_10.x86_64.rpmLinux
SUSE-SU-2018:3342-1(SUSE Linux Enterprise Desktop 12-SP3 ) ntp-4.2.8p12-64.8.2.x86_64.rpmLinux
SUSE-SU-2018:3342-1(SUSE Linux Enterprise Desktop 12-SP3 ) ntp-debuginfo-4.2.8p12-64.8.2.x86_64.rpmLinux
SUSE-SU-2018:3342-1(SUSE Linux Enterprise Desktop 12-SP3 ) ntp-debugsource-4.2.8p12-64.8.2.x86_64.rpmLinux
SUSE-SU-2018:3342-1(SUSE Linux Enterprise Desktop 12-SP3 ) ntp-doc-4.2.8p12-64.8.2.x86_64.rpmLinux
SUSE-SU-2018:3352-1(SUSE Linux Enterprise Server 11-SP4 ) ntp-4.2.8p12-64.7.1.i586.rpmLinux
SUSE-SU-2018:3352-1(SUSE Linux Enterprise Server 11-SP4 ) ntp-4.2.8p12-64.7.1.x86_64.rpmLinux
SUSE-SU-2018:3352-1(SUSE Linux Enterprise Server 11-SP4 ) ntp-doc-4.2.8p12-64.7.1.i586.rpmLinux
SUSE-SU-2018:3352-1(SUSE Linux Enterprise Server 11-SP4 ) ntp-doc-4.2.8p12-64.7.1.x86_64.rpmLinux
(RHSA-2019:2077) ntp security, bug fix, and enhancement update ntp-4.2.6p5-29.el7.x86_64.rpmLinux
(RHSA-2019:2077) ntp security, bug fix, and enhancement update ntp-doc-4.2.6p5-29.el7.noarch.rpmLinux
(RHSA-2019:2077) ntp security, bug fix, and enhancement update ntp-perl-4.2.6p5-29.el7.noarch.rpmLinux
(RHSA-2019:2077) ntp security, bug fix, and enhancement update ntpdate-4.2.6p5-29.el7.x86_64.rpmLinux
(RHSA-2019:2077) ntp security, bug fix, and enhancement update sntp-4.2.6p5-29.el7.x86_64.rpmLinux
Ntp update (ELSA-2018-3854) ntp-4.2.6p5-15.0.1.el6_10.x86_64.rpmLinux
Ntp-perl update (ELSA-2018-3854) ntp-perl-4.2.6p5-15.0.1.el6_10.x86_64.rpmLinux
Ntpdate update (ELSA-2018-3854) ntpdate-4.2.6p5-15.0.1.el6_10.x86_64.rpmLinux
Ntp-doc update (ELSA-2018-3854) ntp-doc-4.2.6p5-15.0.1.el6_10.noarch.rpmLinux
Ntp update (ELSA-2018-3854) ntp-4.2.6p5-15.0.1.el6_10.i686.rpmLinux
Ntp-perl update (ELSA-2018-3854) ntp-perl-4.2.6p5-15.0.1.el6_10.i686.rpmLinux
Ntpdate update (ELSA-2018-3854) ntpdate-4.2.6p5-15.0.1.el6_10.i686.rpmLinux
Out-of-bounds Write Vulnerability (CVE-2018-12327)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234