Unrated severityOSV Advisory· Published Jan 16, 2019· Updated Aug 4, 2024

CVE-2019-6445

Description

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem.

Affected products

Ntpsec/NtpsecOSV
Range: HMS_PRE_AC_214A_AUDIO, NTP_4_0_94, NTP_4_0_94b, …
osv-coords
pkg:rpm/opensuse/ntpsec&distro=openSUSE%20Tumbleweed
Range: < 1.2.1-1.2

Patches

113e618782a4

https://github.com/ntpsec/ntpsecvia osv

commit

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.exploit-db.com/exploits/46177/mitreexploitx_refsource_EXPLOIT-DB
dumpco.re/blog/ntpsec-bugsmitrex_refsource_MISC
dumpco.re/bugs/ntpsec-authed-npemitrex_refsource_MISC
github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWSmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.006
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000