Threats tagged 'ghsa-28fm-m2x6-h5pf'

NTPsec versions before 1.2.5 contain an out-of-bounds read and write vulnerability in the NTS client extension field parsing function (extens_client_recv). This flaw allows a remote attacker who can send NTP server-mode replies to corrupt heap memory and crash the ntpd process. Additionally, when combined with a previously fixed out-of-bounds read in NTS-KE client (fixed in 1.2.4), it can bypass NTS authentication and manipulate the client's time settings.