[ntp:security] [Bug 3453] Interleaved symmetric mode cannot recover from bad state

bugzilla-daemon at ntp.org bugzilla-daemon at ntp.org
Wed Mar 14 17:10:20 UTC 2018


http://bugs.ntp.org/show_bug.cgi?id=3453

contacto at agora-security.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |contacto at agora-security.com

--- Comment #7 from contacto at agora-security.com 2018-03-14 17:10:04 UTC ---
Hello,

http://support.ntp.org/bin/view/Main/NtpBug3453 says that the CVSS2:
(AV:N/AC:M/Au:N/C:P/I:N/A:N) anyhow I understand that the attack is a DoS,
hence the CVSS2 should be (AV:N/AC:M/Au:N/C:N/I:N/A:P) or
(AV:N/AC:M/Au:N/C:N/I:N/A:C).

CVSS3 is correct.

Cheers,

-- 
Configure bugmail: http://bugs.ntp.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


More information about the security mailing list