CVE-2019-6444

Опубликовано: 16 янв. 2019

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Средний

Описание

An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.

Ссылки

https://dumpco.re/blog/ntpsec-bugs
Exploit
Third Party Advisory
https://dumpco.re/bugs/ntpsec-oobread2
Exploit
Third Party Advisory
https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
Release Notes
Third Party Advisory
https://www.exploit-db.com/exploits/46176/
Exploit
Third Party Advisory
VDB Entry
https://dumpco.re/blog/ntpsec-bugs
Exploit
Third Party Advisory
https://dumpco.re/bugs/ntpsec-oobread2
Exploit
Third Party Advisory
https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
Release Notes
Third Party Advisory
https://www.exploit-db.com/exploits/46176/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*

Версия до 1.1.3 (исключая)

EPSS

Процентиль: 94%

0.12577

Средний

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2019-6444

CVSS3: 9.1

ubuntu

около 7 лет назад

An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.

CVE-2019-6444

CVSS3: 9.1

debian

около 7 лет назад

An issue was discovered in NTPsec before 1.1.3. process_control() in n ...

GHSA-ggw9-jvx5-hggr

CVSS3: 9.1

github

больше 3 лет назад

An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.

openSUSE-SU-2019:0082-1

suse-cvrf

почти 7 лет назад

Security update for ntpsec

EPSS

Процентиль: 94%

0.12577

Средний

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-125