CVE-2017-6451

The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf…

published March 27, 2017

CVSS
—
EPSS
0%
Percentile
40.6
In the wild
Unconfirmed
What it is

The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00481 · 40.6th percentile
Published
2017-03-27T17:00Z
EPSS history
Timeline
  • 27 MAR 17:00Z
    The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf…
    cvelistv5