CVE-2019-6445

概要

参考情報

• dumpco.re/blog/ntpsec-bugs · Exploit
• dumpco.re/bugs/ntpsec-authed-npe · Exploit
• ntpsec/ntpsec · Release Notes
• exploit-db.com/exploits/46177 · Exploit

ntpsec のその他の脆弱性

• CVE-2023-4012高 7.5ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
• CVE-2021-22212高 7.4ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '#' characters. ntpd then either p…
• CVE-2019-6444緊急 9.1An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-contr…
• CVE-2019-6443緊急 9.1An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in …
• CVE-2019-6442中 6.5An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config re…