Stephen Gray

An off-path attacker can cause a preemptible client association to be demobilized by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This issue persists even when authentication is enabled.

An issue exists in the message authentication functionality of libntp, allowing an attacker to send crafted messages in an attempt to recover the `message digest key`. This could potentially be exploited by sending a series of crafted messages.

The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference, via a ntpdc reslist command.

The issue allows remote attackers to cause a denial of service, specifically stack exhaustion, by sending an ntpdc relist command. This command triggers recursive traversal of the restriction list.