Vulnerabilities (CVE)

Filtered by vendor Ntpsec Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-6443 1 Ntpsec 1 Ntpsec 2019-01-22 6.4 MEDIUM 9.1 CRITICAL
An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.
CVE-2019-6444 1 Ntpsec 1 Ntpsec 2019-01-22 6.4 MEDIUM 9.1 CRITICAL
An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.