NTPsec < 1.2.1 Improper Filtering Vulnerability

NTPsec is prone to an improper filtering vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntpsec:ntpsec";...

Critical Photon OS Security Update - PHSA-2024-5.0-0195

Updates of 'powershell', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'ntpsec', 'gnutls' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2024-5.0-91-0195

Updates of 'linux-esx', 'gnutls', 'powershell', 'linux', 'ntpsec', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

Fedora: Security Advisory for ntpsec (FEDORA-2023-9fa8f29bb7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for ntpsec (FEDORA-2023-26cbce3854)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: ntpsec-1.2.2a-1.fc38

NTPsec is a more secure and improved implementation of the Network Time Protocol derived from the original NTP project...

[SECURITY] Fedora 37 Update: ntpsec-1.2.2a-1.fc37

NTPsec is a more secure and improved implementation of the Network Time Protocol derived from the original NTP project...

Fedora 38 : ntpsec (2023-26cbce3854)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-26cbce3854 advisory. Security fix for CVE-2023-4012 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : ntpsec (2023-9fa8f29bb7)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9fa8f29bb7 advisory. Security fix for CVE-2023-4012 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2023-4012 Incomplete Internal State Distinction in ntpsec

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

CVE-2023-4012 Incomplete Internal State Distinction in ntpsec

ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

Debian: Security Advisory (DSA-5466-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5466-1] ntpsec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 04, 2023 https://www.debian.org/security/faq -...

DSA-5466-1 ntpsec - security update

Bulletin has no description...

Debian DSA-5466-1 : ntpsec - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5466 advisory. - ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3. CVE-2023-4012 Note that Nessus has not tested for...

K45427159: NTP authentication bypass vulnerability CVE-2016-1551

Security Advisory Description ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, an...

SUSE CVE-2019-6442

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config request, related to configremotely in ntpconfig.c, yyparse in ntpparser.tab.c, and yyerror in ntpparser.y...

Fedora: Security Advisory for ntpsec (FEDORA-2021-3ffc890685)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: ntpsec-1.2.1-3.fc34

NTPsec is a more secure and improved implementation of the Network Time Protocol derived from the original NTP project...

Man-in-the-middle (MITM)

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...