Lucene search

PRIOn knowledge basePRION:CVE-2023-26554

HistoryApr 11, 2023 - 9:15 p.m.

Out-of-bounds

2023-04-1121:15:00

PRIOn knowledge base

www.prio-n.com

ntp 4.2.8p15

mstolfp

out-of-bounds write

libntp

ntpq process

ntpd

nvd

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.3%

JSON

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a ‘\0’ character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.

CPENameOperatorVersion
ntpeq4.2.8 p15

CPE	Name	Operator	Version
	ntp	eq	4.2.8 p15

References

github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26554

github.com/spwpun/ntp-4.2.8p15-cves/issues/1