CVE-2023-4012 – Incomplete Internal State Distinction in ntpsec

https://notcve.org/view.php?id=CVE-2023-4012

ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3). • https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038422 https://gitlab.com/NTPsec/ntpsec/-/issues/794 • CWE-372: Incomplete Internal State Distinction •