1 matches found
Internet Bug Bounty: ntpd: read_mru_list() does inadequate incoming packet checks
Summary: If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that crafted malicious mrulist query packet. Mitigation: - Only allow mrulist query packets from trusted hosts. - Implement BCP-38. - Upgrade to 4.2.8p...
4.3CVSS6.5AI score0.52935EPSS
SaveExploits7
20