SUSE CVE-2019-6443

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctlgetitem, there is a stack-based buffer over-read in readsysvars in ntpcontrol.c in ntpd...

SUSE CVE-2019-6445

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntpcontrol.c, related to ctlgetitem...

ntpd Heap Buffer Overflow DoS

The vulnerability of the ctlgetitem method in the ntpd daemon, which implements the NTP synchronization protocol, relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by using specially crafted mode 6 Troj...

PT-2019-18091

Name of the Vulnerable Software and Affected Versions NTPsec versions prior to 1.1.3 Description An issue was discovered in NTPsec due to a bug in ctl getitem, resulting in a stack-based buffer over-read in read sysvars in ntpd. Recommendations For versions prior to 1.1.3, update to version 1.1.3...

NTP ntpd denial of service vulnerability (CNVD-2018-04874)

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. ntpd is an operating system daemon. An information disclosure vulnerability exists in the ctlgetitem method of ntpd in NTP versions 4.2.8p6 through 4.2.8p10. A remote attacker coul...

PT-2017-8051

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p7 NTP versions 4.3.x prior to 4.3.92 Description The issue allows remote attackers to cause a denial of service, resulting in ntpd abort. This is triggered by a large request data value, which causes the ctl getitem...