tocsin

Alpine/ntpsec: critical 9.1

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.

Action: Upgrade ntpsec to 1.1.3-r0 or later.

Affected

introducedfixedlast affected
01.1.3-r0-

Fixed versions

1.1.3-r0

Sources

published · modified · JSON