Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable. https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6458