Finding and exploiting ntpd vulnerabilities
Project Zero guest researcher Stephen Röttger found CVE-2014-9295, a global buffer overflow in ntpd's control packet handling that he exploited on OS X Mavericks, triggered by an attacker on the local network sending an IPv6 packet with a spoofed ::1...