NTPsec ntpd Out of Bounds Read (CVE-2019-6444)

An out of bounds read vulnerability has been reported in NTPsec ntpd. The vulnerability is due to insufficient validation of the address of a field to be read in a NTP packet. Successful exploitation could lead to disclosure of sensitive information...

OPENSUSE-SU-2019:0082-1 Security update for ntpsec

This update for ntpsec to version 1.1.3 fixes the following issues: Security issues fixed: - CVE-2019-6442: Fixed a out of bounds write via a malformed config request boo1122132 - CVE-2019-6443: Fixed a stack-based buffer over-read in the ctlgetitem function boo1122144 - CVE-2019-6444: Fixed a...

openSUSE Security Update : ntpsec (openSUSE-2019-82)

This update for ntpsec to version 1.1.3 fixes the following issues : Security issues fixed : - CVE-2019-6442: Fixed a out of bounds write via a malformed config request boo1122132 - CVE-2019-6443: Fixed a stack-based buffer over-read in the ctlgetitem function boo1122144 - CVE-2019-6444: Fixed a...

Security update for ntpsec (important)

openSUSE Security Update: Security update for ntpsec Announcement ID: openSUSE-SU-2019:0082-1 Rating: important References: 1122131 1122132 1122134 1122144 Cross-References: CVE-2019-6442 CVE-2019-6443 CVE-2019-6444 CVE-2019-6445 Affected Products: openSUSE Leap 15.0 An update that fixes four...

NTPsec 1.1.2 - ntp_control Out-of-Bounds Read Exploit

!/usr/bin/env python Exploit Title: ntpsec 1.1.2 OOB read Proof of concept Bug Discovery: Magnus Klaaborg Stubman @magnusstubman Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: https://dumpco.re/bugs/ntpsec-oobread2 Vendor Homepage: https://ntpsec.org/ Software Link:...

UBUNTU-CVE-2019-6444

An issue was discovered in NTPsec before 1.1.3. processcontrol in ntpcontrol.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl in ntpd...

CVE-2019-6444

An issue was discovered in NTPsec before 1.1.3. processcontrol in ntpcontrol.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl in ntpd...

CVE-2019-6444

CVE-2019-6444 affects NTPsec prior to 1.1.3. The issue is a stack-based buffer over-read in ntp_control.c::process_control(), where attacker-controlled data is dereferenced by ntohl() in ntpd. Acts as a remote-network issue; exploitation can lead to information leakage and potential denial of ser...

CVE-2019-6444

An issue was discovered in NTPsec before 1.1.3. processcontrol in ntpcontrol.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl in ntpd...

NTPsec 1.1.2 ntp_control Out-Of-Bounds Read

!/usr/bin/env python Exploit Title: ntpsec 1.1.2 OOB read Proof of concept Bug Discovery: Magnus Klaaborg Stubman @magnusstubman Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: https://dumpco.re/bugs/ntpsec-oobread2 Vendor Homepage: https://ntpsec.org/ Software Link:...

CVE-2019-6444

creationtimestamp| type| source ---|---|--- 2019-01-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46176...

NTPsec 1.1.2 - ntp_control Out-of-Bounds Read (PoC)

NTPsec 1.1.2 - ntpcontrol Out-of-Bounds Read PoC !/usr/bin/env python Exploit Title: ntpsec 1.1.2 OOB read Proof of concept Bug Discovery: Magnus Klaaborg Stubman @magnusstubman Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: https://dumpco.re/bugs/ntpsec-oobread2 Vendor Homepage:...

NTPsec 1.1.2 - 'ntp_control' Out-of-Bounds Read (PoC)

!/usr/bin/env python Exploit Title: ntpsec 1.1.2 OOB read Proof of concept Bug Discovery: Magnus Klaaborg Stubman @magnusstubman Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: https://dumpco.re/bugs/ntpsec-oobread2 Vendor Homepage: https://ntpsec.org/ Software Link:...