Описание
An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1.1.0+dfsg1-1ubuntu0.2 |
| cosmic | released | 1.1.1+dfsg1-2ubuntu0.1 |
| devel | not-affected | 1.1.3+dfsg1-1 |
| esm-apps/bionic | released | 1.1.0+dfsg1-1ubuntu0.2 |
| esm-infra-legacy/trusty | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 1.1.3+dfsg1-1 |
| xenial | DNE |
Показывать по
6.4 Medium
CVSS2
9.1 Critical
CVSS3
Связанные уязвимости
An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.
An issue was discovered in NTPsec before 1.1.3. process_control() in n ...
An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.
6.4 Medium
CVSS2
9.1 Critical
CVSS3