Описание
Security update for ntpd-rs
This update for ntpd-rs fixes the following issues:
- Introducing ntpd-rs version 1.2.3
Список пакетов
SUSE Package Hub 15 SP6
ntpd-rs-1.2.3-bp156.2.1
ntpd-rs-common-1.2.3-bp156.2.1
openSUSE Leap 15.6
ntpd-rs-1.2.3-bp156.2.1
ntpd-rs-common-1.2.3-bp156.2.1
Ссылки
- E-Mail link for openSUSE-SU-2024:0300-1
- SUSE Security Ratings
- SUSE CVE CVE-2024-38528 page
Описание
nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. Non NTS-KE server configurations, such as the default ntpd-rs configuration, are unaffected. This vulnerability has been patched in version 1.1.3.
Затронутые продукты
SUSE Package Hub 15 SP6:ntpd-rs-1.2.3-bp156.2.1
SUSE Package Hub 15 SP6:ntpd-rs-common-1.2.3-bp156.2.1
openSUSE Leap 15.6:ntpd-rs-1.2.3-bp156.2.1
openSUSE Leap 15.6:ntpd-rs-common-1.2.3-bp156.2.1
Ссылки
- CVE-2024-38528