Total vulnerabilities in the database
An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.
| Software | From | Fixed in |
|---|---|---|
| ntp / ntp | 4.2.8-p2 | 4.2.8-p2.x |
| ntp / ntp | 4.2.8-p3 | 4.2.8-p3.x |
| ntp / ntp | 4.2.8-p1 | 4.2.8-p1.x |
| ntp / ntp | 4.2.8-p3-rc3 | 4.2.8-p3-rc3.x |
| ntp / ntp | 4.2.8-p3-rc2 | 4.2.8-p3-rc2.x |
| ntp / ntp | 4.2.8-p3-rc1 | 4.2.8-p3-rc1.x |
| ntp / ntp | 4.3.0 | 4.3.77 |
| ntp / ntp | 4.2.8-p1-beta1 | 4.2.8-p1-beta1.x |
| ntp / ntp | 4.2.8-p1-beta2 | 4.2.8-p1-beta2.x |
| ntp / ntp | 4.2.8-p1-beta3 | 4.2.8-p1-beta3.x |
| ntp / ntp | 4.2.8-p1-beta4 | 4.2.8-p1-beta4.x |
| ntp / ntp | 4.2.8-p1-beta5 | 4.2.8-p1-beta5.x |
| ntp / ntp | 4.2.8-p1-rc1 | 4.2.8-p1-rc1.x |
| ntp / ntp | 4.2.8-p1-rc2 | 4.2.8-p1-rc2.x |
| ntp / ntp | 4.2.8 | 4.2.8.x |
| ntp / ntp | 4.2.8-p2-rc1 | 4.2.8-p2-rc1.x |
| ntp / ntp | 4.2.8-p2-rc2 | 4.2.8-p2-rc2.x |
| ntp / ntp | 4.2.8-p2-rc3 | 4.2.8-p2-rc3.x |
| ntp / ntp | 4.0 | 4.2.8 |