CVE-2018-12327

CVE-2018-12327 is a critical stack-based buffer overflow vulnerability affecting ntpq and ntpdc components of NTP version 4.2.8p11. An attacker can exploit this by providing a long string as an IPv4 or IPv6 command-line argument, potentially leading to remote code execution or privilege escalation. With a CVSS score of 9.8 (CRITICAL) and a FAUCET Risk Score of 96/100, this vulnerability has a high impact on confidentiality, integrity, and availability, requiring no user interaction or authentication. While not listed on CISA's KEV catalog, a Proof-of-Concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.