Use of a broken or risky cryptographic algorithm in NTPsec - CVE-2021-22212
Published: August 6, 2023
Vulnerability identifier: #VU78974
CSH Severity: Medium
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-22212
CWE-ID: CWE-327
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform MitM attack.
The vulnerability exists due to improper input validation when parsing keys generated by ntpkeygen. If the key contains a string with with '#' characters, the ntpd then either pads, shortens the key, or fails to load these keys entirely, which can result in possibility to launch MITM attacks between ntp clients and ntp servers.
Affected software
NTPsec
Fedora
ntpsec
Fedora
ntpsec
How to mitigate CVE-2021-22212
Install updates from vendor's website.
NTPsec - update to 1.2.1
ntpsec - update to 1.2.1-3.fc34
ntpsec - update to 1.2.1-3.fc34
External References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22212.json
- https://gitlab.com/NTPsec/ntpsec/-/issues/699
- https://bugzilla.redhat.com/show_bug.cgi?id=1955859
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3GIT2HYL5BQXPGKI6ZDNG473IEQ5WQF2/