ntpsec:FuzzClient: Use-of-uninitialized-value in nts_client_process_response_core

Project: https://gitlab.com/NTPsec/ntpsec.git Detailed Report: https://oss-fuzz.com/testcase?key=5360233063251968 Project: ntpsec Fuzzing Engine: libFuzzer Fuzz Target: FuzzClient Job Type: libfuzzermsanntpsec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ntpsec:FuzzExtens: Use-of-uninitialized-value in extens_server_recv

Detailed Report: https://oss-fuzz.com/testcase?key=5977465670991872 Project: ntpsec Fuzzing Engine: libFuzzer Fuzz Target: FuzzExtens Job Type: libfuzzermsanntpsec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: extensserverrecv FuzzExtens.c Sanitizer: memory...

ntpsec:FuzzServer: Heap-buffer-overflow in ke_next_record

Project: https://gitlab.com/NTPsec/ntpsec.git Detailed Report: https://oss-fuzz.com/testcase?key=4655793278681088 Project: ntpsec Fuzzing Engine: afl Fuzz Target: FuzzServer Job Type: aflasanntpsec Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x606000000296 Crash Stat...

ntpsec:FuzzLeapsec: Crash in stringreader

Project: https://gitlab.com/NTPsec/ntpsec.git Detailed Report: https://oss-fuzz.com/testcase?key=5190351995928576 Project: ntpsec Fuzzing Engine: libFuzzer Fuzz Target: FuzzLeapsec Job Type: libfuzzerasanntpsec Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x614000010000 Crash State:...

ntpsec:FuzzLeapsec: Use-of-uninitialized-value in leapsec_raw

Project: https://gitlab.com/NTPsec/ntpsec.git Detailed Report: https://oss-fuzz.com/testcase?key=5175305030991872 Project: ntpsec Fuzzing Engine: libFuzzer Fuzz Target: FuzzLeapsec Job Type: libfuzzermsanntpsec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ntpsec:FuzzServer: Use-after-poison in ke_next_record

Project: https://gitlab.com/NTPsec/ntpsec.git Detailed Report: https://oss-fuzz.com/testcase?key=5929355863261184 Project: ntpsec Fuzzing Engine: afl Fuzz Target: FuzzServer Job Type: aflasanntpsec Platform Id: linux Crash Type: Use-after-poison READ 2 Crash Address: 0x7f15a00fd00a Crash State:...

ntpsec:FuzzExtens: Use-after-poison in ex_next_record

Project: https://gitlab.com/NTPsec/ntpsec.git Detailed Report: https://oss-fuzz.com/testcase?key=5652606961188864 Project: ntpsec Fuzzing Engine: afl Fuzz Target: FuzzExtens Job Type: aflasanntpsec Platform Id: linux Crash Type: Use-after-poison READ 2 Crash Address: 0x7f4840bfd036 Crash State:...

Fedora: Security Advisory for ntpsec (FEDORA-2021-3ffc890685)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: ntpsec-1.2.1-3.fc34

NTPsec is a more secure and improved implementation of the Network Time Protocol derived from the original NTP project...

Man-in-the-middle (MITM)

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

Design/Logic Flaw

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

CVE-2021-22212 affects ntpsec up to at least 1.2.0 and related NTP tooling. The issue: ntpkeygen can generate keys that ntpd cannot parse, with the inclusion of '#' characters. ntpd may pad, shorten, or fail to load these keys depending on key type and position of '#'. Consequence: administrators...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212: Use of a Broken or Risky Cryptographic Algorithm

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...