Lucene search
GitLabCVELIST:CVE-2023-4012HistoryAug 07, 2023 - 5:30 p.m.
CVE-2023-4012 Incomplete Internal State Distinction in ntpsec
2023-08-0717:30:33
CWE-372
GitLab
www.cve.org
1
cve-2023-4012
incomplete internal state distinction
ntpsec
ntpd
server
nts-enabled
certificate
client request
mode 3
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
CNA Affected
[
{
"vendor": "NTPsec",
"product": "ntpsec",
"versions": [
{
"version": "1.2.2",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
prion
prion
Design/Logic Flaw
2023-08-07 18:15:00
fedora
fedora
[SECURITY] Fedora 37 Update: ntpsec-1.2.2a-1.fc37
2023-08-12 04:24:29
[SECURITY] Fedora 38 Update: ntpsec-1.2.2a-1.fc38
2023-08-12 04:25:47
openvas
openvas
Fedora: Security Advisory for ntpsec (FEDORA-2023-26cbce3854)
2023-08-14 00:00:00
Fedora: Security Advisory for ntpsec (FEDORA-2023-9fa8f29bb7)
2023-08-14 00:00:00
NTPsec < 1.2.2a DoS Vulnerability
2024-02-20 00:00:00
ubuntucve
ubuntucve
CVE-2023-4012
2023-08-07 00:00:00
nvd
nvd
CVE-2023-4012
2023-08-07 18:15:10
nessus
nessus
Fedora 37 : ntpsec (2023-9fa8f29bb7)
2023-08-12 00:00:00
Debian DSA-5466-1 : ntpsec - security update
2023-08-04 00:00:00
Fedora 38 : ntpsec (2023-26cbce3854)
2023-08-12 00:00:00
debiancve
debiancve
CVE-2023-4012
2023-08-07 18:15:10
osv
osv
ntpsec - security update
2023-08-04 00:00:00
CVE-2023-4012
2023-08-07 18:15:10
cve
cve
CVE-2023-4012
2023-08-07 18:15:10
debian
debian
[SECURITY] [DSA 5466-1] ntpsec security update
2023-08-04 05:15:04
veracode
veracode
Denial Of Service (DoS)
2023-08-06 11:09:50
alpinelinux
alpinelinux
CVE-2023-4012
2023-08-07 18:15:10
photon
photon
Critical Photon OS Security Update - PHSA-2024-5.0-0195
2024-01-25 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Related for CVELIST:CVE-2023-4012