Matthew Van Gundy

An issue exists in the origin timestamp check functionality, where a specially crafted unauthenticated network packet can reset the expected origin timestamp for target peers. This causes legitimate replies from targeted peers to fail the origin timestamp check, resulting in a denial of service condition.

The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference when the trap service is enabled. This can be achieved by sending specially crafted packets to the affected system.

The issue allows remote attackers to set or unset traps via a crafted control mode packet, which can lead to a denial of service caused by a NULL pointer dereference when the trap service has been enabled. By sending specially crafted packets, a remote attacker could exploit this to cause the application to crash.

The issue allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet. It is also caused by a NULL pointer dereference when trap service has been enabled, allowing a remote attacker to exploit this vulnerability to cause the application to crash. Multiple vulnerabilities could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or modify the time being advertised by a device acting as a Network Time Protocol (NTP) server.

The issue allows remote attackers to cause a denial of service, potentially by exploiting the `poll interval` in a broadcast packet or through a NULL pointer dereference when the trap service is enabled. This could be achieved by sending specially crafted packets. Multiple vulnerabilities in the NTP daemon package could allow an unauthenticated, remote attacker to cause a denial of service condition or modify the time being advertised by a device acting as an NTP server.

An issue exists in the message authentication functionality of libntp, allowing an attacker to send crafted messages in an attempt to recover the `message digest key`. This could potentially be exploited by sending a series of crafted messages.

An off-path attacker can cause a preemptible client association to be demobilized by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This issue persists even when authentication is enabled.

A malicious authenticated peer can exploit an issue in the clock selection algorithm to modify a victim's clock. The issue is related to the handling of ephemeral associations, allowing an attacker to create multiple associations and influence the clock selection. This can potentially impact the integrity of data.

The issue allows remote attackers to obtain origin timestamps and then impersonate peers. There is also a vulnerability in Cisco IOS, but details are not provided.