Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2019-6443

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.

Related bugs and status

CVE-2019-6443 (Candidate) is related to these bugs:

Bug #1812458: ntpsec security fixes for bionic & cosmic

		In	Importance	Status
1812458	ntpsec security fixes for bionic & cosmic	ntpsec (Ubuntu)	Undecided	Fix Released
1812458	ntpsec security fixes for bionic & cosmic	ntpsec (Ubuntu Cosmic)	Undecided	Fix Released
1812458	ntpsec security fixes for bionic & cosmic	ntpsec (Ubuntu Bionic)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: https://dumpco.re/blog...
MISC: https://dumpco.re/bugs...
MISC: https://github.com/ntp...
EXPLOIT-DB: 46175