CVE:CVE-2018-7170
CNNVD:CNNVD-201803-144
NTP（Network Time Protocol，网络时间协议）是一种以数据包交换把两台电脑的时钟同步化的网络协议。ntpd是其中的一个操作系统守护进程。
NTP 4.2.8p7之前的4.2.x版本和4.3.92之前的4.3.x版本中的nptd存在安全漏洞。攻击者可通过实施Sybil攻击利用该漏洞创建任意多个短暂关联，更改用户的时钟。
solution:Upgrade ntp ntp to a higher version than 4.2.8,4.3.92,4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,and avoid the version [4.2.0,4.2.8),[4.3.0,4.3.92),4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6; Upgrade synology diskstation_manager to a higher version than 6.1.6-15266,and avoid the version [5.2,6.1.6-15266); Upgrade synology router_manager to a higher version than 1.1.6-6931-3,and avoid the version [1.1,1.1.6-6931-3); Upgrade synology skynas to a higher version than 6.1.5-15254,and avoid the version (,6.1.5-15254); Upgrade synology virtual_diskstation_manager to a higher version than 6.1.6-15266,and avoid the version (,6.1.6-15266); Upgrade synology vs960hd_firmware to a higher version than 2.2.3-1505,and avoid the version (,2.2.3-1505); Upgrade netapp hci to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade hpe hpux-ntp to a higher version than c.4.2.8.4.0,and avoid the version (,c.4.2.8.4.0)