Total vulnerabilities in the database
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
| Software | From | Fixed in |
|---|---|---|
| ntp / ntp | 4.2.8-p15 | 4.2.8-p15.x |