CVE-2019-6444

PoC ×3—

CVSS 3.0

9.1 critical

EPSS

46%p99

Published

Jan 16, 2019 (Jan 16, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.

Vendors: ntpsec
Products: ntpsec
Weakness: CWE-125
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (45.7%)

In the news0 stories

No ingested article mentions this CVE yet.