CVE-2023-33192

2023-05-2704:15:25

CWE-130

[email protected]

web.nvd.nist.gov

ntpd-rs

ntp

server

crash

slice indexing

nts packet

cve-2023-33192

security

patch

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

47.5%

JSON

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes when it is not configured to handle NTS packets. The issue was caused by improper slice indexing. The indexing operations were replaced by safer alternatives that do not crash the ntpd-rs server process but instead properly handle the error condition. A patch was released in version 0.3.3.

Affected configurations

Vulners

NVD

Node

pendulum-projectntpd_rsRange0.3.0–0.3.3

CPENameOperatorVersion
tweedegolf:ntpd-rstweedegolf ntpd-rslt0.3.3

CPE	Name	Operator	Version
tweedegolf:ntpd-rs	tweedegolf ntpd-rs	lt	0.3.3

CNA Affected

[
  {
    "vendor": "pendulum-project",
    "product": "ntpd-rs",
    "versions": [
      {
        "version": ">= 0.3.0, < 0.3.3",
        "status": "affected"
      }
    ]
  }
]