PT-2023-2769 · Ntp +4 · Ntp +4

Name of the Vulnerable Software and Affected Versions: NTP versions 4.2.8p15 Description: The issue is related to an out-of-bounds write in the mstolfp function in libntp/mstolfp.c when adding a '0' character. This can be exploited by a remote attacker to potentially execute arbitrary code by...

NTP 缓冲区错误漏洞

NTP is a network time protocol from nwtime open source. A security vulnerability exists in NTP version 4.2.8p15, which stems from an out-of-bounds write in the mstolfp presence loop in libntp/mstolfp.c. The vulnerability is caused by the presence of an out-of-bounds write in the libntp/mstolfp lo...

CVE-2023-26551

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cpcpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26552

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26552

CVE-2023-26552 affects NTP 4.2.8p15 where mstolfp.c can trigger an out-of-bounds write when adding a decimal point. The advisory notes that an attacker could potentially target a client ntpq process but cannot compromise ntpd. Several connected sources (IBM IBM i/security bulletins and Brocade/AS...

PT-2023-2552 · Ntp +5 · Ntp +5

Name of the Vulnerable Software and Affected Versions: NTP versions 4.2.8p15 Description: The issue is related to an out-of-bounds write in the mstolfp function when adding a decimal point. This can be exploited by an adversary to potentially execute arbitrary code by sending a specially crafted...

CVE-2023-26551

CVE-2023-26551 affects NTP 4.2.8p15, where mstolfp.c contains an out-of-bounds write in the cp

NTP 缓冲区错误漏洞

NTP is a network time protocol from nwtime open source. A security vulnerability exists in NTP version 4.2.8p15, which stems from an out-of-bounds write when adding a decimal point to mstolfp in libntp/mstolfp.c. The vulnerability is caused by the use of an out-of-bounds write when adding a decim...

CVE-2023-26554

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...