Threats tagged 'ghsa-rjr3-53fv-wjrf'

NTPsec versions before 1.2.4 contain an out-of-bounds read vulnerability in the NTS-KE client response parser. This flaw allows a malicious NTS-KE server to read the client's stack memory, including pointers that can defeat ASLR. The client then sends these pointers in cleartext as NTS cookies, due to an NTS-KE record declaring a length larger than the actual data received.