CVE-2024-38528

Publication date 28 June 2024

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

nptd-rs is a tool for synchronizing your computer’s clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. Non NTS-KE server configurations, such as the default ntpd-rs configuration, are unaffected. This vulnerability has been patched in version 1.1.3.

Status

Package Ubuntu Release Status
rust-ntpd 25.04 plucky
Not affected
24.10 oracular
Needs evaluation
24.04 LTS noble
Needs evaluation
23.10 mantic Not in release
22.04 LTS jammy Not in release
20.04 LTS focal Not in release