CVE-2018-7182: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 28.8% chance of exploitation in the next 30 days.

The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.

Affected products

• Canonical Ubuntu Linux: version 17.10 only; version 18.04 only
• Netapp Element Software: affected versions not specified
• Ntp Ntp: version 4.2.8 only

Published 2018-03-06. Last modified 2026-06-17.