Summary
It was discovered that ntpq and ntpdc incorrectly handled some arguments.
An attacker could possibly use this issue to cause ntpq or ntpdc to crash,
execute arbitrary code, or escalate to higher privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | ntp | 1:4.2.8p4+dfsg-3ubuntu5.10 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.13+esm1 |
Vulnerabilities 1
-
Unscored —
Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or e…
References
-
report
https://ubuntu.com/security/CVE-2018-12327