[ntp:security] [Bug 2937] nextvar() missing length check

bugzilla-daemon at ntp.org bugzilla-daemon at ntp.org
Tue Oct 13 01:40:20 UTC 2015


http://bugs.ntp.org/show_bug.cgi?id=2937

Danny Mayer <mayer at ntp.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mayer at ntp.org

--- Comment #2 from Danny Mayer <mayer at ntp.org> 2015-10-13 01:40:20 UTC ---
If this is just affecting ntpq then this is not a serious problem as only ntpq
will fsil. It doesn't affect the server unless there is a path that would allow
the transfer of the problem to the ntpq server target.

-- 
Configure bugmail: http://bugs.ntp.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


More information about the security mailing list