CVE-2023-4012

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

CVE-2023-4012

CVE-2023-4012 affects the ntpsec/ntpd stack used on Linux hosts; the vulnerability causes a crash (DoS) when a non-NTS server receives an NTS-enabled client request (mode 3). The issue is documented across multiple security advisories (Fedora FEDORA-2023-26cbce3854, Fedora 37/38 patches) and Ness...

CVE-2023-4012

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

CVE-2023-4012 Incomplete Internal State Distinction in ntpsec

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

CVE-2023-4012 Incomplete Internal State Distinction in ntpsec

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

CVE-2023-4012

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

[SECURITY] [DSA 5466-1] ntpsec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 04, 2023 https://www.debian.org/security/faq -...

SUSE SLES12 Security Update : ntp (SUSE-SU-2023:2609-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2609-1 advisory. ntp was updated to 4.2.8p17: Fix some regressions of 4.2.8p16 Update to 4.2.8p16: Sec 3808 Assertion failure in ntpq on malformed RT-11 date...

CVE-2023-33192

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

Design/Logic Flaw

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

CVE-2023-33192 Improper handling of NTS cookie length that could crash the ntpd-rs server

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

CVE-2023-33192

CVE-2023-33192 affects ntpd-rs, a Rust NTP implementation. The issue is improper handling/validation of NTS cookie length in NTP packets, allowing a specially crafted cookie to crash the ntpd-rs server (also observed when the server is not configured to handle NTS). Root cause: unsafe or faulty s...

CVE-2023-33192 Improper handling of NTS cookie length that could crash the ntpd-rs server

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

ntpd-rs 安全漏洞

ntpd-rs is a full-featured implementation of the Network Time Protocol, including NTS support. A security vulnerability exists in ntpd-rs versions 0.3.0 through 0.3.2, which stems from the fact that ntpd-rs does not validate the length of the NTS cookie in NTP packets received from the server,...

GHSA-QWHM-H7V3-MRJX Improper handling of NTS cookie length that could crash the ntpd-rs server

Impact ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes when it is not configured to handle NTS...

Improper handling of NTS cookie length that could crash the ntpd-rs server

Impact ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes when it is not configured to handle NTS...

Siemens SIMATIC NET CP 443-1 OPC UA Improper Input Validation (CVE-2016-9042)

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin...

CVE-2023-26554

An out-of-bounds write flaw was found in the ntp package. A remote attacker may trigger this vulnerability by sending malicious data packets to the ntp server. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26553

An out-of-bounds write flaw was found in the ntp package. A remote attacker may trigger this vulnerability by sending malicious data packets to the ntp server. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26552

An out-of-bounds write flaw was found in the ntp package. A remote attacker may trigger this vulnerability by sending malicious data packets to the ntp server. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...