NTPsec > 1.1.3 - 'ctl_getitem' Out-of-Bounds Read
NTPsec before 1.1.3 contains a stack-based buffer over-read caused by a bug in ctl_getitem in read_sysvars in ntp_control.c in ntpd, letting local or remote attackers read sensitive memory, exploit requires sending crafted control requests. References: https://nvd.nist.gov/vuln/detail/CVE-2019-6443 https://www.exploit-db.com/exploits/46175 Remediation: Update to version 1.1.3 or later.
Used 18 times · 9 assets checked · domain, subdomain, ipv4