CVE-2019-6442
CVE-2019-6442
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config request, related to config_remotely in ntp_config.c, yyparse in ntp_parser.tab.c, and yyerror in ntp_parser.y.
CVSS 6.5 · Medium · EPSS 13.7% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ntpsec Debian:12
- Affected ranges
- ECOSYSTEM: < 1.1.3+dfsg1-1
Update to 1.1.3+dfsg1-1
ntpsec Debian:13
- Affected ranges
- ECOSYSTEM: < 1.1.3+dfsg1-1
Update to 1.1.3+dfsg1-1
ntpsec Debian:14
- Affected ranges
- ECOSYSTEM: < 1.1.3+dfsg1-1
Update to 1.1.3+dfsg1-1
ntpsec Ubuntu:18.04:LTS
- Versions
- 1.0.0+dfsg1-1
- 1.0.0+dfsg1-3
- 1.1.0+dfsg1-1
- 1.1.0+dfsg1-1ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 1.1.0+dfsg1-1ubuntu0.2
Update to 1.1.0+dfsg1-1ubuntu0.2