CVEvulnerability

CVE-2009-0159

6.8 MEDIUM Published 2009-04-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-04-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.

Affected configurations

• ntp ntp (<= 4.2.4p7) • ntp ntp 4.0.72 • ntp ntp 4.0.73 • ntp ntp 4.0.90 • ntp ntp 4.0.91 • ntp ntp 4.0.92 • ntp ntp 4.0.93 • ntp ntp 4.0.94 • ntp ntp 4.0.95 • ntp ntp 4.0.96 • ntp ntp 4.0.97 • ntp ntp 4.0.98 • ntp ntp 4.0.99 • ntp ntp 4.1.0 • ntp ntp 4.1.2 • ntp ntp 4.2.0 • ntp ntp 4.2.2 • ntp ntp 4.2.2p1 • ntp ntp 4.2.2p2 • ntp ntp 4.2.2p3 • ntp ntp 4.2.2p4 • ntp ntp 4.2.4 • ntp ntp 4.2.4p0 • ntp ntp 4.2.4p1 • ntp ntp 4.2.4p2 • ntp ntp 4.2.4p3 • ntp ntp 4.2.4p4 • ntp ntp 4.2.4p5 • ntp ntp 4.2.4p6

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References