[ntp:security] [Bug 3009] Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC

bugzilla-daemon at ntp.org bugzilla-daemon at ntp.org
Wed Feb 3 06:53:55 UTC 2016


http://bugs.ntp.org/show_bug.cgi?id=3009

Harlan Stenn <stenn at ntp.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Group|                            |Security
                 CC|                            |LRlian at 163.com
            Summary|x                           |Crafted addpeer with hmode
                   |                            |> 7 causes array wraparound
                   |                            |with MATCH_ASSOC
              Flags|                            |blocking4.2.8+

--- Comment #1 from Harlan Stenn <stenn at ntp.org> 2016-02-03 06:53:55 UTC ---
Using a crafted packet to create a peer association with hmode >7 causes the
MATCH_ASSOC() lookup to make out-of-bounds references.

-- 
Configure bugmail: http://bugs.ntp.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


More information about the security mailing list