CVE-2016-3988

CVE-2016-3988 affects Meinberg NTP Time Server interfaces across multiple IMS-LANTIME/LANTIME/SyncFire/LCES devices (M3000, M1000, M500, M900, M600, M400, M300, M200, M100, SyncFire 1100, LCES) with firmware prior to 6.20.004. The vulnerability is due to multiple stack-based buffer overflows in t...

Meinberg NTP Time Server Vulnerabilities

OVERVIEW Independent researcher Ryan Wincey has identified a stack buffer overflow vulnerability and a privilege escalation vulnerability in Meinberg’s NTP Time Servers Interface. Meinberg has produced a new Version 6.20.004 to mitigate these vulnerabilities. The researcher has validated the...