Description
The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.
Exploits (1)
exploitdb
WORKING POC
by Magnus Klaaborg Stubman · pythonlocallinux
https://www.exploit-db.com/exploits/45846
References (11)
Scores
CVSS v3
7.5
EPSS
0.1108
EPSS Percentile
93.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-125
Status
published
Products (4)
canonical/ubuntu_linux
17.10
canonical/ubuntu_linux
18.04
netapp/element_software
ntp/ntp
4.2.8 p10 (5 CPE variants)
Published
Mar 06, 2018
Tracked Since
Feb 18, 2026