CVE-2019-6445

Опубликовано: 16 янв. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Средний

Описание

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem.

Ссылки

https://dumpco.re/blog/ntpsec-bugs
Exploit
Third Party Advisory
https://dumpco.re/bugs/ntpsec-authed-npe
Exploit
Third Party Advisory
https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
Release Notes
Third Party Advisory
https://www.exploit-db.com/exploits/46177/
Exploit
Third Party Advisory
VDB Entry
https://dumpco.re/blog/ntpsec-bugs
Exploit
Third Party Advisory
https://dumpco.re/bugs/ntpsec-authed-npe
Exploit
Third Party Advisory
https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
Release Notes
Third Party Advisory
https://www.exploit-db.com/exploits/46177/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*

Версия до 1.1.3 (исключая)

EPSS

Процентиль: 93%

0.1167

Средний

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2019-6445

CVSS3: 6.5

ubuntu

около 7 лет назад

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem.

CVE-2019-6445

CVSS3: 6.5

debian

около 7 лет назад

An issue was discovered in NTPsec before 1.1.3. An authenticated attac ...

GHSA-48cf-q482-5pp4

CVSS3: 6.5

github

больше 3 лет назад

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem.

openSUSE-SU-2019:0082-1

suse-cvrf

почти 7 лет назад

Security update for ntpsec

EPSS

Процентиль: 93%

0.1167

Средний

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-476