CVE-2023-4012

Description

References

• bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
• gitlab.com/NTPsec/ntpsec/-/issues/794 · Issue Tracking

Weitere Schwachstellen in ntpsec

• CVE-2021-22212HOCH 7.4ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '#' characters. ntpd then either p…
• CVE-2019-6445MITTEL 6.5An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control…
• CVE-2019-6444KRITISCH 9.1An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-contr…
• CVE-2019-6443KRITISCH 9.1An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in …
• CVE-2019-6442MITTEL 6.5An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config re…