| Package | Affected versions | Patched versions |
|---|---|---|
| ntp | = 4.2.8≥ 4.3.0, < 4.3.92< 4.2.8 | 4.3.924.2.8 |
| communications user data repository | = 10.0.0= 10.0.1= 12.0.0 |
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free