vulnerability

Huawei EulerOS: CVE-2023-26553: ntp security update

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 11, 2023
Added
Jan 10, 2024
Modified
Jan 28, 2025

Description

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.

Solution(s)

huawei-euleros-2_0_sp11-upgrade-ntphuawei-euleros-2_0_sp11-upgrade-ntp-help
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.