PT-2024-28055 · Nptd-Rs · Nptd-Rs

Mlichvar · Published 2024-06-28 · Updated 2024-10-11 · CVE-2024-38528

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions nptd-rs versions prior to 1.1.3

Description The issue is related to a missing limit for accepted NTS-KE connections in nptd-rs, a tool for synchronizing computer clocks that implements the NTP and NTS protocols. This allows an unauthenticated remote attacker to crash nptd-rs when an NTS-KE server is configured. Configurations without an NTS-KE server, such as the default ntpd-rs configuration or NTP only configurations, are unaffected. A remote attacker can trigger this crash by opening a large number of parallel TCP connections to the server, potentially making the ntpd-rs daemon completely unavailable.

Recommendations For versions prior to 1.1.3, update to version 1.1.3 to resolve the issue. As a temporary workaround, consider disabling the NTS-KE server functionality to prevent exploitation. Additionally, increasing system resource limits (RLIMIT NOFILE) or lowering the key-exchange-timeout-ms configuration setting can make the attack more difficult.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2024-38528

GHSA-2XPX-VCMQ-5F72

OPENSUSE-SU-2024:0300-1

OPENSUSE-SU-2024:0331-1

OPENSUSE-SU-2024:14194-1

Affected Products

Nptd-Rs

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38528.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:0300-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-38528 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-38528 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-38528 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38528 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-38528 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:0331-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14194-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38528 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2xpx-vcmq-5f72 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-38528 · Vendor Advisory
• https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-2xpx-vcmq-5f72 · Note
• https://github.com/pendulum-project/ntpd-rs · Note
• https://github.com/pendulum-project/ntpd-rs/commit/6049687006ea5b26eeac927964b5fcc80d7bde50 · Note