CVE-2023-26554

> [Suggested description]
> mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character.
>
> ------------------------------------------
>
> [Additional Information]
> There is a buffer overflow error in mstolfp.c:90
>
> ------------------------------------------
>
> [Vulnerability Type]
> Buffer Overflow
>
> ------------------------------------------
>
> [Vendor of Product]
> The NTP Project (R&D)
>
> ------------------------------------------
>
> [Affected Product Code Base]
> ntp - ntp4.2.8p15
>
> ------------------------------------------
>
> [Affected Component]
> libntp, mstolfp
>
> ------------------------------------------
>
> [Attack Type]
> Remote
>
> ------------------------------------------
>
> [Impact Code execution]
> true
>
> ------------------------------------------
>
> [Impact Denial of Service]
> true
>
> ------------------------------------------
>
> [Attack Vectors]
> mstolfp.o belongs to the libntp component. As an upstream library, the libntp component can affect many other components, such as ntpd. A remote attacker may trigger this vulnerability by sending malicious data packets to the ntp server.
>
> ------------------------------------------
>
> [Reference]
> https://drive.google.com/drive/folders/1vw_Ls_0hQGNx_K5etxUTUDZ4GlAxMByX?usp=sharing