ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
Weakness
The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ntpsec | Ntpsec | 1.2.2 (including) | 1.2.2 (including) |
| Ntpsec | Ubuntu | bionic | * |
| Ntpsec | Ubuntu | esm-apps/bionic | * |
| Ntpsec | Ubuntu | esm-apps/focal | * |
| Ntpsec | Ubuntu | esm-apps/jammy | * |
| Ntpsec | Ubuntu | focal | * |
| Ntpsec | Ubuntu | jammy | * |
| Ntpsec | Ubuntu | lunar | * |
| Ntpsec | Ubuntu | trusty | * |
| Ntpsec | Ubuntu | upstream | * |
| Ntpsec | Ubuntu | xenial | * |