A potential off by one vulnerability exists in the cookedprint functionality of ntpq. A specially crafted buffer could cause a buffer overflow potentially resulting in null byte being written out of bounds. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7852