An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ntpsec | Ntpsec | * | 1.1.3 (excluding) |
| Ntpsec | Ubuntu | bionic | * |
| Ntpsec | Ubuntu | cosmic | * |
| Ntpsec | Ubuntu | upstream | * |