CVE:CVE-2018-7185
CNNVD:CNNVD-201803-141
NTP（Network Time Protocol，网络时间协议）是一款通过网络同步计算机时钟的协议。protocol engine是其中的一个协议引擎。
NTP 4.2.8p11之前的4.2.6版本中的protocol引擎存在输入验证错误漏洞。远程攻击者可通过连续的发送数据包利用该漏洞造成拒绝服务（中断）。
solution:Upgrade ntp ntp to a higher version than 4.2.8,4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p10,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,4.2.8:p7,4.2.8:p8,4.2.8:p9,and avoid the version [4.2.6,4.2.8),4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p10,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,4.2.8:p7,4.2.8:p8,4.2.8:p9; Upgrade synology diskstation_manager to a higher version than 6.1.6-15266,and avoid the version [5.2,6.1.6-15266); Upgrade synology router_manager to a higher version than 1.1.6-6931-3,and avoid the version [1.1,1.1.6-6931-3); Upgrade synology skynas to a higher version than 6.1.5-15254,and avoid the version (,6.1.5-15254); Upgrade synology virtual_diskstation_manager to a higher version than 6.1.6-15266,and avoid the version (,6.1.6-15266); Upgrade synology vs960hd_firmware to a higher version than 2.2.3-1505,and avoid the version (,2.2.3-1505); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,18.04,and avoid the version 12.04,14.04,16.04,17.10,18.04; Upgrade netapp hci to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade hpe hpux-ntp to a higher version than c.4.2.8.4.0,and avoid the version (,c.4.2.8.4.0); Upgrade oracle fujitsu_m10-1_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070); Upgrade oracle fujitsu_m10-4_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070); Upgrade oracle fujitsu_m10-4s_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070); Upgrade oracle fujitsu_m12-1_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070); Upgrade oracle fujitsu_m12-2_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070); Upgrade oracle fujitsu_m12-2s_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070)