Main
Vulnerability Database
Exploits
ID:6101 - Exploit for Information disclosure in Network Time Protocol - CVE-2018-7182
ID:6101 - Exploit for Information disclosure in Network Time Protocol - CVE-2018-7182
Published: June 17, 2021
Vulnerability identifier: #VU10798
Vulnerability risk: Low
CVE-ID: CVE-2018-7182
CWE-ID: CWE-200
Exploitation vector: Remote access
Vulnerable software:
Network Time Protocol
Network Time Protocol
Link to public exploit:
Vulnerability description
The vulnerability allows a remote unautheticated attacker to obtain potentially sensitive information.
The weakness exists due to insufficient validation user-supplied input. A remote attacker can submit a specially crafted mode 6 packet and gain access to potentially sensitive information.
Remediation
Update to version ntp-4.2.8p11.