MitM attack in NTPsec
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2021-22212 |
| CWE-ID | CWE-327 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
NTPsec Client/Desktop applications / Encryption software |
| Vendor | The NTPsec project |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
1) Use of a broken or risky cryptographic algorithm
EUVDB-ID: #VU78974
Risk: Medium
CVSSv3.1: 4.2 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-22212
CWE-ID:
CWE-327 - Use of a Broken or Risky Cryptographic Algorithm
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform MitM attack.
The vulnerability exists due to improper input validation when parsing keys generated by ntpkeygen. If the key contains a string with with '#' characters, the ntpd then either pads, shortens the key, or fails to load these keys entirely, which can result in possibility to launch MITM attacks between ntp clients and ntp servers.
MitigationInstall updates from vendor's website.
Vulnerable software versionsNTPsec: 1.0.0 - 1.2.0
External linkshttp://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22212.json
http://gitlab.com/NTPsec/ntpsec/-/issues/699
http://bugzilla.redhat.com/show_bug.cgi?id=1955859
http://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3GIT2HYL5BQXPGKI6ZDNG473IEQ5WQF2/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
