ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
https://lists.fedoraproject.org/archives/list/[email protected]/message/VQDOZSTH2AZXBO2QAVR2SZEMK2A7WBRB/
https://lists.fedoraproject.org/archives/list/[email protected]/message/OC2KDNL4GO7MDAFSNWBQA4T2Q2VNPUJD/
https://gitlab.com/NTPsec/ntpsec/-/issues/794
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038422
Source: Mitre, NVD
Published: 2023-08-07
Updated: 2023-08-15
Base Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Severity: High
Base Score: 7.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H