CVE-2023-4012CWE-372

Incomplete Internal State Distinction in ntpsec

High · published August 7, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00450 · 38.1th percentile
Weakness
CWE-372 · Incomplete Internal State Distinction
Published
2023-08-07T17:30Z
EPSS history
Timeline
  • 07 AUG 17:30Z
    Incomplete Internal State Distinction in ntpsec
    cvelistv5