DSA-5466-1 ntpsec - security update

Bulletin has no description...

Debian DSA-5466-1 : ntpsec - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5466 advisory. - ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3. CVE-2023-4012 Note that Nessus has not tested for...

K45427159: NTP authentication bypass vulnerability CVE-2016-1551

Security Advisory Description ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, an...

SUSE CVE-2019-6442

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config request, related to configremotely in ntpconfig.c, yyparse in ntpparser.tab.c, and yyerror in ntpparser.y...

Fedora: Security Advisory for ntpsec (FEDORA-2021-3ffc890685)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: ntpsec-1.2.1-3.fc34

NTPsec is a more secure and improved implementation of the Network Time Protocol derived from the original NTP project...

Man-in-the-middle (MITM)

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

Design/Logic Flaw

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

CVE-2021-22212 affects ntpsec up to at least 1.2.0 and related NTP tooling. The issue: ntpkeygen can generate keys that ntpd cannot parse, with the inclusion of '#' characters. ntpd may pad, shorten, or fail to load these keys depending on key type and position of '#'. Consequence: administrators...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

NTPsec ntpd Out of Bounds Read (CVE-2019-6444)

An out of bounds read vulnerability has been reported in NTPsec ntpd. The vulnerability is due to insufficient validation of the address of a field to be read in a NTP packet. Successful exploitation could lead to disclosure of sensitive information...

OPENSUSE-SU-2019:0082-1 Security update for ntpsec

This update for ntpsec to version 1.1.3 fixes the following issues: Security issues fixed: - CVE-2019-6442: Fixed a out of bounds write via a malformed config request boo1122132 - CVE-2019-6443: Fixed a stack-based buffer over-read in the ctlgetitem function boo1122144 - CVE-2019-6444: Fixed a...

NTPsec ntpd write_variables Denial of Service (CVE-2019-6445; CVE-2019-8936)

A denial-of-service vulnerability has been reported inN TPsec ntpd. The vulnerability is due to insufficient validation of certain data when parsing a variable in order to write. An attacker could exploit this vulnerability by enticing a target user to open a specially crafted link...

NTPsec ntpd ctl_getitem Out of Bounds Read (CVE-2019-6443)

An out of bounds read vulnerability has been reported in NTPsec ntpd. The vulnerability is due to insufficient validation of the length of a message in a NTP packet. A remote unauthenticated user can exploit this vulnerability by sending a crafted packet to the target server...

openSUSE: Security Advisory for ntpsec (openSUSE-SU-2019:0082-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...