NULL pointer dereference in NTPsec - CVE-2019-6445

Vulnerability details

The vulnerability allows a remote authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote authenticated attacker can trigger NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem. A remote attacker can perform a denial of service (DoS) attack.

Affected software

How to mitigate CVE-2019-6445

Links to Public Exploits and PoC-codes

• Exploit #6141 - NTPsec 1.1.2 - 'ntp_control' (Authenticated) NULL Pointer Dereference (PoC) (June 17, 2021)

External References

• https://dumpco.re/blog/ntpsec-bugs
• https://dumpco.re/bugs/ntpsec-authed-npe
• https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
• https://www.exploit-db.com/exploits/46177/

Related Security Bulletins

• Multiple vulnerabilities in NTPsec
• OpenSUSE Linux update for ntpsec
• NULL pointer dereference in ntpsec (Alpine package)