CVE-2014-9295

2014-12-20T02:59:00
ID CVE-2014-9295
Type cve
Reporter cve@mitre.org
Modified 2018-11-30T21:30:00

Description

Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function.