Stack out-of-bounds read in NTPsec - CVE-2019-6443

Vulnerability details

The vulnerability allows a remote authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a bug in ctl_getitem. A remote attacker can trigger a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd and perform a denial of service attack.

Affected software

How to mitigate CVE-2019-6443

Links to Public Exploits and PoC-codes

• Exploit #6143 - NTPsec 1.1.2 - 'ctl_getitem' Out-of-Bounds Read (PoC) (June 17, 2021)

External References

• https://dumpco.re/blog/ntpsec-bugs
• https://dumpco.re/bugs/ntpsec-oobread1
• https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
• https://www.exploit-db.com/exploits/46175/

Related Security Bulletins

• Multiple vulnerabilities in NTPsec
• OpenSUSE Linux update for ntpsec
• Stack out-of-bounds read in ntpsec (Alpine package)