Vulnerabilities for Virtual diskstation manager (...) - CXSECURITY.COM

Vulnerabilities for 'Virtual diskstation manager'

2018-03-06

CVE-2018-7185

CWE-20

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

CVE-2018-7184

CWE-20

ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.

CVE-2018-7170

CWE-noinfo

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.

>>> Vendor: Synology 42 Products

Directory server

Diskstation manager

Synology photo station

Download station

Photo station uploader

Cloud station backup

Cloud station drive

Virtual diskstation manager

Vs960hd firmware

Mailplus server

Application service

Universal search

Surveillance station

Diskstation manager unified controller

Copyright 2024, cxsecurity.com