Critical severity9.1OSV Advisory· Published Jan 16, 2019· Updated Jun 17, 2026

CVE-2019-6444

Description

An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ntpsec/NtpsecOSV3 versions
HMS_PRE_AC_214A_AUDIO, NTP_4_0_94, NTP_4_0_94b, …+ 2 more
- (no CPE)range: HMS_PRE_AC_214A_AUDIO, NTP_4_0_94, NTP_4_0_94b, …
- cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*range: <1.1.3
- (no CPE)range: <1.1.3

Patches

Vulnerability mechanics

References

dumpco.re/blog/ntpsec-bugsnvdExploitThird Party Advisory
dumpco.re/bugs/ntpsec-oobread2nvdExploitThird Party Advisory
www.exploit-db.com/exploits/46176/nvdExploitThird Party AdvisoryVDB Entry
github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWSnvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.037
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000