Debian/ntp: medium 4.3
The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a cr
Action: Upgrade ntp to 1:4.2.8p7+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:4.2.8p7+dfsg-1 | - |
Fixed versions
| 1:4.2.8p7+dfsg-1 |
Sources
published · modified · JSON