Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2019-6443
HistoryJan 16, 2019 - 5:29 a.m.

CVE-2019-6443

2019-01-1605:29:01
CWE-125
[email protected]
web.nvd.nist.gov
156
ntpsec
cve-2019-6443
ntp
security
bug fix
buffer over-read
nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.1 High

AI Score

Confidence

High

0.381 Low

EPSS

Percentile

97.2%

JSON

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.

Affected configurations

NVD
Node
ntpsecntpsecRange<1.1.3
CPENameOperatorVersion
ntpsec:ntpsecntpseclt1.1.3

Related

ubuntucve 1
packetstorm 1
prion 1
osv 1
zdt 1
exploitpack 1
debiancve 1
nvd 1
alpinelinux 1
checkpoint_advisories 1
cvelist 1
exploitdb 1
openvas 2
suse 1
nessus 1
ubuntucve
ubuntucve
CVE-2019-6443
2019-01-16 00:00:00
packetstorm
packetstorm
NTPsec 1.1.2 ctl_getitem Out-Of-Bounds Read
2019-01-16 00:00:00
prion
prion
Stack overflow
2019-01-16 05:29:00
osv
osv
CVE-2019-6443
2019-01-16 05:29:01
zdt
zdt
NTPsec 1.1.2 - ctl_getitem Out-of-Bounds Read Exploit
2019-01-17 00:00:00
exploitpack
exploitpack
NTPsec 1.1.2 - ctl_getitem Out-of-Bounds Read (PoC)
2019-01-16 00:00:00
debiancve
debiancve
CVE-2019-6443
2019-01-16 05:29:01
nvd
nvd
CVE-2019-6443
2019-01-16 05:29:01
alpinelinux
alpinelinux
CVE-2019-6443
2019-01-16 05:29:01
checkpoint_advisories
checkpoint_advisories
NTPsec ntpd ctl_getitem Out of Bounds Read (CVE-2019-6443)
2019-02-24 00:00:00
cvelist
cvelist
CVE-2019-6443
2019-01-16 05:00:00
exploitdb
exploitdb
NTPsec 1.1.2 - &#039;ctl_getitem&#039; Out-of-Bounds Read (PoC)
2019-01-16 00:00:00
openvas
openvas
NTPsec < 1.1.3 Multiple Vulnerabilities
2024-02-20 00:00:00
openSUSE: Security Advisory for ntpsec (openSUSE-SU-2019:0082-1)
2019-01-24 00:00:00
suse
suse
Security update for ntpsec (important)
2019-01-23 00:00:00
nessus
nessus
openSUSE Security Update : ntpsec (openSUSE-2019-82)
2019-01-24 00:00:00

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.1 High

AI Score

Confidence

High

0.381 Low

EPSS

Percentile

97.2%

JSON
Related for CVE-2019-6443
ubuntucve1packetstorm1prion1osv1zdt1exploitpack1debiancve1nvd1alpinelinux1checkpoint_advisories1cvelist1exploitdb1openvas2suse1nessus1