CVE-2024-42861

What it actually does

Remote attacker can send a crafted Pdelay_Req message that disrupts the Precision Time Protocol time synchronization function, resulting in denial of service.

Why it matters to the business

Disrupts time-sensitive network operations and services relying on precise synchronization, increasing downtime risk in environments with the vulnerable component.

How an attack unfolds

An attacker identifies a target running the vulnerable software and transmits a maliciously crafted Pdelay_Req message to trigger the flaw in time synchronization handling, causing the service to fail.

How to fix it

Upgrade the affected package to the fixed version 0.0.4 or later.

How to confirm the fix worked

Confirm the installed version matches or exceeds the fixed release and verify that malformed Pdelay_Req messages no longer cause service disruption.

Typical attack path

1. Identify systems exposing the time synchronization service
2. Craft a malicious Pdelay_Req message
3. Send the message to the target
4. Trigger denial of service condition

How to detect it

Examine service and system logs for unexpected crashes or restarts correlated with receipt of Pdelay_Req messages.

What your security team should do

• Apply the available update to the fixed version without delay
• Monitor network traffic for anomalous Pdelay messages targeting the service
• Review and inventory all instances of the affected component