An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ntpsec | Ntpsec | * | 1.1.3 (excluding) |
| Ntpsec | Ubuntu | bionic | * |
| Ntpsec | Ubuntu | cosmic | * |
| Ntpsec | Ubuntu | esm-apps/bionic | * |
| Ntpsec | Ubuntu | upstream | * |