CVE-2023-4012

Description

References

• bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
• gitlab.com/NTPsec/ntpsec/-/issues/794 · Issue Tracking

ntpsec 的其他漏洞

• CVE-2021-22212高危 7.4ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '#' characters. ntpd then either p…
• CVE-2019-6445中危 6.5An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control…
• CVE-2019-6444严重 9.1An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-contr…
• CVE-2019-6443严重 9.1An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in …
• CVE-2019-6442中危 6.5An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config re…