Upstream information

CVE-2024-38528 at MITRE

Description

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. Non NTS-KE server configurations, such as the default ntpd-rs configuration, are unaffected. This vulnerability has been patched in version 1.1.3.

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having not set severity.

No SUSE Bugzilla entries cross referenced.

No SUSE Security Announcements cross referenced.

List of released packages

Product(s) Fixed package version(s) References
openSUSE Tumbleweed
  • ntpd-rs >= 1.2.0-1.1
  • ntpd-rs-common >= 1.2.0-1.1
 Patchnames:
openSUSE-Tumbleweed-2024-14194

SUSE Timeline for this CVE

CVE page created: Sat Jun 29 00:00:37 2024
CVE page last modified: Tue Jul 16 00:51:39 2024