Improper Check or Handling of Exceptional Conditions Affecting ntpd package, versions <1.5.0

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RUST-NTPD-9055231
published2 Mar 2025
disclosed28 Feb 2025
creditUnknown

Report a new vulnerability Found a mistake?

Introduced: 28 Feb 2025

NewCWE-369 (opens in a new tab) CWE-703 (opens in a new tab)

How to fix?

Upgrade ntpd to version 1.5.0 or higher.

Overview

Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions through improper handling of NTS cookies. An attacker can cause the application to crash by sending improperly sized cookies.

References

CVSS Base Scores

version 4.0

version 3.1

Attack Vector (AV)
Network
Attack Complexity (AC)
Low
Attack Requirements (AT)
None
Privileges Required (PR)
None
User Interaction (UI)
Partial

Confidentiality (VC)
None
Integrity (VI)
None
Availability (VA)
Low

Confidentiality (SC)
None
Integrity (SI)
None
Availability (SA)
None