Debian/ntp: medium 5.3
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
Action: Upgrade ntp to 1:4.2.8p7+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:4.2.8p7+dfsg-1 | - |
Fixed versions
| 1:4.2.8p7+dfsg-1 |
Sources
published · modified · JSON