Fedora: Security Advisory (FEDORA-2025-e9be11b9ba)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-33192

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

CVE-2025-4432 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector, xh, wasmcloud, sccache, rye, rustup, wasm-pack, lychee, qdrant, tealdeer, deno, wash, ntpd-rs, uv, samply, shadowsocks-rust, atuin, kdash, wasmtime, linkerd-extension-init, oranda, zizmor, sqlx, nushell, linkerd2-proxy, parseable, pixi, zed, zola,...

GHSA-C86P-W88R-QVQR vulnerabilities

Vulnerabilities for packages: oranda, sqlx, wasmtime, lychee, xh, kdash, zola, cargo-audit, sccache, wash, buck2, ntpd-rs, rye, samply...

Fedora: Security Advisory (FEDORA-2025-66b73d6c72)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: ntpd-rs-1.5.0-1.fc42

Full-featured implementation of NTP with NTS support...

[SECURITY] Fedora 41 Update: ntpd-rs-1.5.0-1.fc41

Full-featured implementation of NTP with NTS support...

Fedora 41 : ntpd-rs (2025-e9be11b9ba)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e9be11b9ba advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...

Fedora 40 : ntpd-rs (2025-66b73d6c72)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-66b73d6c72 advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...

GHSA-4P46-PWFR-66X6 vulnerabilities

Vulnerabilities for packages: deno, zizmor, wasmcloud, qdrant, wadm, ntpd-rs, lychee, rye, zola, linkerd-extension-init, wash, sqlx, shadowsocks-rust, samply, sccache, sdp-k8s-injector, xh, kdash, atuin, uv, pixi, zed, fnm, nushell, parseable, wasm-pack, tealdeer, rustls-ffi, linkerd2-proxy,...

Linux Distros Unpatched Vulnerability : CVE-2016-9311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a...

Linux Distros Unpatched Vulnerability : CVE-2018-7170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral...

Linux Distros Unpatched Vulnerability : CVE-2015-5146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a...

Linux Distros Unpatched Vulnerability : CVE-2016-4955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service peer-variable clearing and association outage by...

Linux Distros Unpatched Vulnerability : CVE-2016-4956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service interleaved-mode transition and time change via a spoofed broadcast packet...

GHSA-V83Q-83HJ-RW38 ntpd NTS client denial of service via wrongly sized cookies

Two denial of service vulnerabilities were found in ntpd-rs related to the handling of NTS cookies in our client functionality. Whenever an NTS source is configured and the server behind that source is sending zero-sized cookies or cookies larger than what would fit in our buffer size, ntpd-rs...

ntpd NTS client denial of service via wrongly sized cookies

Two denial of service vulnerabilities were found in ntpd-rs related to the handling of NTS cookies in our client functionality. Whenever an NTS source is configured and the server behind that source is sending zero-sized cookies or cookies larger than what would fit in our buffer size, ntpd-rs...

CVE-2024-57979

The CVE-2024-57979 entry is supported by connected documents detailing a Linux kernel use-after-free in pps during device teardown. The root cause is described as pps_device_destruct() freeing the pps_device immediately after cdev_del(), while fops from previously opened cdevs may still be callab...

openSUSE Security Advisory (openSUSE-SU-2024:0300-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-38528

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. Non NTS-KE server configurations, such ...