CVE-2009-0159
Fixed in a distro release EPSS 13%
Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
Products: ntp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | ntp | 1:4.2.4p6+dfsg-2 |
| Debian 4.0 | ntp | 1:4.2.2.p4+dfsg-2etch3 |
| Debian 5.0 | ntp | 1:4.2.4p4+dfsg-8lenny2 |
| Red Hat Enterprise Linux 3 | ntp | 0:4.1.2-6.el3 |
| Red Hat Enterprise Linux 3 | ntp-debuginfo | 0:4.1.2-6.el3 |
| Red Hat Enterprise Linux 4 | ntp | 0:4.2.0.a.20040617-8.el4_7.2 |
| Red Hat Enterprise Linux 4 | ntp-debuginfo | 0:4.2.0.a.20040617-8.el4_7.2 |
| Red Hat Enterprise Linux 5 | ntp | 0:4.2.2p1-9.el5_3.2 |
| Red Hat Enterprise Linux 5 | ntp-debuginfo | 0:4.2.2p1-9.el5_3.2 |
| Red Hat rhel eus 4.7 | ntp | 0:4.2.0.a.20040617-8.el4_7.2 |
| Red Hat rhel eus 4.7 | ntp-debuginfo | 0:4.2.0.a.20040617-8.el4_7.2 |
| openSUSE Tumbleweed | ntp | 4.2.8p9-1.1 |