An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config request, related to configremotely in ntpconfig.c, yyparse in ntpparser.tab.c, and yyerror in ntpparser.y.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-6442.json"