CVE-2018-12327: Buffer Overflow
Last updated 25 August 2025
Other sources
Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.
— Launchpad
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-12327?
CVE-2018-12327 is a stack-based buffer overflow vulnerability in ntpq and ntpdc of NTP version 4.2.8p11.
How severe is CVE-2018-12327?
CVE-2018-12327 has a severity rating of 9.8 out of 10, indicating it is critical.
Which software is affected by CVE-2018-12327?
The affected software includes NTP version 4.2.8p11 and some versions of the ntp package in Debian and Ubuntu.
How can an attacker exploit CVE-2018-12327?
An attacker can exploit CVE-2018-12327 by providing a long string as the argument for an IPv4 or IPv6 command-line parameter, which can lead to code execution or privilege escalation.
Where can I find more information about CVE-2018-12327?
You can find more information about CVE-2018-12327 on the MITRE CVE website, a GitHub gist, and the Ubuntu security notices.