CVE-2019-6443

Опубликовано: 16 янв. 2019

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Средний

Описание

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.

Ссылки

https://dumpco.re/blog/ntpsec-bugs
Exploit
Third Party Advisory
https://dumpco.re/bugs/ntpsec-oobread1
Exploit
Third Party Advisory
https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
Release Notes
Third Party Advisory
https://www.exploit-db.com/exploits/46175/
Exploit
Third Party Advisory
VDB Entry
https://dumpco.re/blog/ntpsec-bugs
Exploit
Third Party Advisory
https://dumpco.re/bugs/ntpsec-oobread1
Exploit
Third Party Advisory
https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
Release Notes
Third Party Advisory
https://www.exploit-db.com/exploits/46175/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*

Версия до 1.1.3 (исключая)

EPSS

Процентиль: 97%

0.30797

Средний

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2019-6443

CVSS3: 9.1

ubuntu

около 7 лет назад

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.

CVE-2019-6443

CVSS3: 9.1

debian

около 7 лет назад

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ct ...

GHSA-v24q-v22h-25r2

CVSS3: 9.1

github

больше 3 лет назад

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.

openSUSE-SU-2019:0082-1

suse-cvrf

почти 7 лет назад

Security update for ntpsec

EPSS

Процентиль: 97%

0.30797

Средний

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-125