3 matches found
PT-2023-2769 · Ntp +4 · Ntp +4
Name of the Vulnerable Software and Affected Versions: NTP versions 4.2.8p15 Description: The issue is related to an out-of-bounds write in the mstolfp function in libntp/mstolfp.c when adding a '0' character. This can be exploited by a remote attacker to potentially execute arbitrary code by...
DEBIAN-CVE-2016-1550
An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key...
ntp: libntp message digest disclosure
A flaw was found in the way NTP's libntp performed message authentication. An attacker able to observe the timing of the comparison function used in packet authentication could potentially use this flaw to recover the message digest...