CVE-2023-4012
Incomplete Internal State Distinction in ntpsec
Summary
Incomplete Internal State Distinction in ntpsec
Original description
The description as published by the source.
ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-4012 ntpsec Fixed in: 1.2.2+dfsg1-1+deb12u1
References
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com
- web bugs.debian.org