The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1:4.2.6.p5+dfsg-3ubuntu2.14.04.10", "binary_name": "ntp" }, { "binary_version": "1:4.2.6.p5+dfsg-3ubuntu2.14.04.10", "binary_name": "ntp-dbgsym" }, { "binary_version": "1:4.2.6.p5+dfsg-3ubuntu2.14.04.10", "binary_name": "ntp-doc" }, { "binary_version": "1:4.2.6.p5+dfsg-3ubuntu2.14.04.10", "binary_name": "ntpdate" }, { "binary_version": "1:4.2.6.p5+dfsg-3ubuntu2.14.04.10", "binary_name": "ntpdate-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.3", "binary_name": "ntp" }, { "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.3", "binary_name": "ntp-dbgsym" }, { "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.3", "binary_name": "ntp-doc" }, { "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.3", "binary_name": "ntpdate" }, { "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.3", "binary_name": "ntpdate-dbgsym" } ] }