ID:6142 - Exploit for Stack out-of-bounds read in NTPsec - CVE-2019-6444

Link to public exploit:

Vulnerability description

The vulnerability allows a remote authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to attacker-controlled data is dereferenced by ntohl() in ntpd. A remote attacker can trigger stack-based buffer over-read in process_control() in ntp_control.c perform a denial of service attack.

Remediation