Publishing details
Changelog
ntpsec (1.1.1+dfsg1-2ubuntu0.1) cosmic; urgency=medium
* Backport three commits from 1.1.3 to fix (LP: #1812458)
- CVE-2019-6442: "An authenticated attacker can write one byte out of
bounds in ntpd via a malformed config request, related to
config_remotely in ntp_config.c, yyparse in ntp_parser.tab.c, and
yyerror in ntp_parser.y."
- CVE-2019-6443: "Because of a bug in ctl_getitem, there is a stack-based
buffer over-read in read_sysvars in ntp_control.c in ntpd.
- CVE-2019-6444: "process_control() in ntp_control.c has a stack-based
buffer over-read because attacker-controlled data is dereferenced by
ntohl() in ntpd."
- CVE-2019-6445: "An authenticated attacker can cause a NULL pointer
dereference and ntpd crash in ntp_control.c, related to ctl_getitem."
-- Richard Laager <email address hidden> Fri, 18 Jan 2019 19:59:19 -0600
Builds
Built packages
-
ntpsec
Network Time Protocol daemon and utility programs
-
ntpsec-doc
Network Time Protocol documentation
-
ntpsec-ntpdate
client for setting system time from NTP servers
-
ntpsec-ntpviz
NTP statistics graphing utility
-
python3-ntp
Python 3 NTP Helper Classes
Package files