Weakness (CWE)
CWE-372: Incomplete Internal State Distinction
Class Draft Mapping discouraged
The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.
Source: MITRE CWE-372
1 result · Clear filters · Feed
-
High 7.5
Incomplete Internal State Distinction in ntpsec
ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).