NTP: Multiple vulnerabilities — GLSA 201805-12

Multiple vulnerabilities have been found in NTP, the worst of which could lead to remote code execution.

Affected packages

Background

NTP contains software for the Network Time Protocol.

Description

Multiple vulnerabilities have been discovered in NTP. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-misc/ntp-4.2.8_p11"
 

References

• CVE-2018-7170
• CVE-2018-7182
• CVE-2018-7183
• CVE-2018-7184
• CVE-2018-7185

Release date
May 26, 2018

Latest revision
May 26, 2018: 1

Severity
normal

Exploitable
remote

Bugzilla entries

• 649612