CRITICAL
ntp: decodearr() can write beyond its buffer limit
Published Mar 8, 2018
9.8
CRITICALCVSS 3.0
EPSS 10.21%
Description
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.
Affected products
No data.
Configuration 1
Configuration 3
- 12.04
Configuration 4
OR
- 14.04
- 16.04
- 17.10
- 18.04
Configuration 5
- n/a
No data.
Red Hat Enterprise Linux 5
ntp
Not affected
Red Hat Enterprise Linux 6
ntp
Not affected
Red Hat Enterprise Linux 7
ntp
Not affected
Red Hat Enterprise Linux 8
ntp
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | ntp | Not affected | n/a |
| Red Hat Enterprise Linux 6 | ntp | Not affected | n/a |
| Red Hat Enterprise Linux 7 | ntp | Not affected | n/a |
| Red Hat Enterprise Linux 8 | ntp | Will not fix | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
9.8 CRITICAL NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Impact High
Integrity Impact High
Availability Impact High
1 other source (Red Hat) ▾
5.0 MEDIUM Red Hat
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality Impact Low
Integrity Impact Low
Availability Impact Low
7.5 HIGH NVD
AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
10.21% 0.10213
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.10213
Score over time
2021–2026- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v1
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (38 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 10.21% (0.10213) | 95.54th | v5 (v2026.06.15) |
| Jun 15, 2026 | 10.78% (0.10777) | 95.26th | v5 (v2026.06.15) |
| Apr 13, 2026 | 32.04% (0.32035) | 96.82th | v4 (v2025.03.14) |
| Dec 28, 2025 | 26.29% (0.26290) | 96.14th | v4 (v2025.03.14) |
| Dec 27, 2025 | 14.14% (0.14145) | 94.18th | v4 (v2025.03.14) |
| Dec 20, 2025 | 26.29% (0.26290) | 96.13th | v4 (v2025.03.14) |
| Dec 14, 2025 | 23.50% (0.23498) | 95.77th | v4 (v2025.03.14) |
| Dec 13, 2025 | 25.10% (0.25103) | 95.97th | v4 (v2025.03.14) |
| Nov 21, 2025 | 19.62% (0.19624) | 95.18th | v4 (v2025.03.14) |
| Nov 18, 2025 | 30.30% (0.30305) | 96.43th | v4 (v2025.03.14) |
| Nov 17, 2025 | 19.62% (0.19624) | 95.17th | v4 (v2025.03.14) |
| Oct 28, 2025 | 14.25% (0.14247) | 94.09th | v4 (v2025.03.14) |
| Oct 27, 2025 | 10.03% (0.10033) | 92.74th | v4 (v2025.03.14) |
| Oct 1, 2025 | 14.25% (0.14247) | 94.19th | v4 (v2025.03.14) |
| Aug 10, 2025 | 10.50% (0.10503) | 92.93th | v4 (v2025.03.14) |
| Aug 1, 2025 | 16.68% (0.16675) | 94.69th | v4 (v2025.03.14) |
| Jul 13, 2025 | 14.77% (0.14768) | 94.17th | v4 (v2025.03.14) |
| Mar 30, 2025 | 10.50% (0.10503) | 92.55th | v4 (v2025.03.14) |
| Mar 29, 2025 | 18.84% (0.18836) | 92.27th | v4 (v2025.03.14) |
| Mar 17, 2025 | 10.50% (0.10503) | 92.69th | v4 (v2025.03.14) |
| Dec 17, 2024 | 32.36% (0.32361) | 97.03th | v3 (v2023.03.01) |
| May 3, 2024 | 71.67% (0.71675) | 98.04th | v3 (v2023.03.01) |
| Feb 16, 2024 | 77.88% (0.77881) | 98.13th | v3 (v2023.03.01) |
| Jan 16, 2024 | 84.45% (0.84455) | 98.22th | v3 (v2023.03.01) |
| Sep 8, 2023 | 89.13% (0.89125) | 98.31th | v3 (v2023.03.01) |
| Jul 30, 2023 | 90.21% (0.90212) | 98.36th | v3 (v2023.03.01) |
| Jul 8, 2023 | 90.15% (0.90153) | 98.33th | v3 (v2023.03.01) |
| May 8, 2023 | 88.09% (0.88088) | 98.12th | v3 (v2023.03.01) |
| Mar 7, 2023 | 88.01% (0.88006) | 98.02th | v3 (v2023.03.01) |
| Mar 6, 2023 | 10.05% (0.10052) | 94.55th | v2 (v2022.01.01) |
| Dec 3, 2022 | 10.05% (0.10052) | 94.41th | v2 (v2022.01.01) |
| Apr 1, 2022 | 9.80% (0.09801) | 93.83th | v2 (v2022.01.01) |
| Feb 4, 2022 | 9.80% (0.09801) | 87.26th | v2 (v2022.01.01) |
| Feb 3, 2022 | 5.33% (0.05330) | 78.84th | v1 |
| Jan 6, 2022 | 5.33% (0.05330) | 78.63th | v1 |
| Sep 1, 2021 | 5.33% (0.05330) | 88.23th | v1 |
| Jul 21, 2021 | 5.33% (0.05330) | 0.00th | v1 |
| Apr 14, 2021 | 4.91% (0.04905) | 0.00th | v1 |
Weaknesses (2)
References (15)
- http://support.ntp.org/bin/view/Main/NtpBug3414 x_refsource_CONFIRMVendor Advisory
- http://support.ntp.org/bin/view/Main/SecurityNotice#February_2018_ntp_4_2_8p11_NTP_S x_refsource_CONFIRMVendor Advisory
- http://www.securityfocus.com/bid/103351 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- https://access.redhat.com/security/cve/CVE-2018-7183 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1550223 Issue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2018-7183
- https://security.FreeBSD.org/advisories/FreeBSD-SA-18:02.ntp.asc vendor-advisoryx_refsource_FREEBSDThird Party Advisory
- https://security.gentoo.org/glsa/201805-12 vendor-advisoryx_refsource_GENTOOThird Party Advisory
- https://security.netapp.com/advisory/ntap-20180626-0001/ x_refsource_CONFIRMThird Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us x_refsource_CONFIRM
- https://usn.ubuntu.com/3707-1/ vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- https://usn.ubuntu.com/3707-2/ vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2018-7183
- https://www.oracle.com//security-alerts/cpujul2021.html x_refsource_MISC
- https://www.synology.com/support/security/Synology_SA_18_13 x_refsource_CONFIRMThird Party Advisory
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Mar 8, 2018
Updated Aug 5, 2024
Reserved Feb 16, 2018
Link CVE-2018-7183
CISA Vulnrichment
Updated n/a