260 matches found
CVE-2026-102485
A flaw was found in NTPsec. An out-of-bounds read vulnerability in the Motorola Oncore reference clock driver allows an attacker with control over the connected GPS receiver's serial data to crash the service, leading to a Denial of Service DoS, or potentially disclose sensitive memory. By...
CVE-2026-102484
A flaw was found in NTPsec. This vulnerability allows an attacker who controls a Telephone JJY time source to crash the daemon, resulting in a Denial of Service DoS, or cause memory corruption. The issue stems from a heap-based buffer overflow in the JJY reference clock driver when processing mor...
CVE-2026-102483
A flaw was found in NTPsec. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted Network Time Security NTS request containing excessive NTS Cookie Placeholder extension fields. Handling this malformed request causes the daemon to unexpectedly...
Linux Distros Unpatched Vulnerability : CVE-2026-121506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read and write in NTS client extension field parsing extensclientrecv in NTPsec before 1.2.5 allows a remote attacker who can send NTP...
Linux Distros Unpatched Vulnerability : CVE-2026-121505
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the...
CVE-2026-121506
A flaw was found in NTPsec. An out-of-bounds memory read and write issue in the Network Time Security NTS client extension field parsing allows a remote attacker capable of sending server responses to trigger heap memory corruption. By supplying a crafted NTS extension field with an excessive non...
CVE-2026-121505
A flaw was found in NTPsec. A malicious Network Time Security Key Exchange NTS-KE server can cause information disclosure by sending a response record with a declared length exceeding the data received. This triggers an out-of-bounds read in the client response parser, allowing the server to...
CVE-2026-121506
An out-of-bounds read and write in NTS client extension field parsing extensclientrecv in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd, and, combined with the NTS-KE client out-of-bounds read fixed in 1.2....
CVE-2026-121505
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
CVE-2026-121506 Out-of-bounds Write in NTPsec
An out-of-bounds read and write in NTS client extension field parsing extensclientrecv in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd, and, combined with the NTS-KE client out-of-bounds read fixed in 1.2....
CVE-2026-121506
The NTPsec software (versions before 1.2.5 ) is vulnerable to an out-of-bounds read and write during NTS client extension field parsing within the extens_client_recv function. A remote attacker capable of sending NTP server-mode replies to an NTS client can exploit this to corrupt heap memory and...
EUVD-2026-115827
An out-of-bounds read and write in NTS client extension field parsing extensclientrecv in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd, and, combined with the NTS-KE client out-of-bounds read fixed in 1.2....
EUVD-2026-115826
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
CVE-2026-121505 Out-of-bounds Read in NTPsec
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
CVE-2026-121505 Out-of-bounds Read in NTPsec
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
CVE-2026-121505 Out-of-bounds Read in NTPsec
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
CVE-2026-121505
NTPsec versions before 1.2.4 are vulnerable to an out-of-bounds read in the nts_client_process_response_core function of the NTS-KE client response parser. A malicious NTS-KE server can trigger this by sending a record where the declared length exceeds the actual data received. This allows the se...
CVE-2026-121506: NTPsec: An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.2.5…
An out-of-bounds read and write in NTS client extension field parsing extensclientrecv in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd, and, combined with the NTS-KE client out-of-bounds read fixed in 1.2....
CVE-2026-121505: NTPsec: An out-of-bounds read in the NTS-KE client response parser (nts_client_process_response_core) in NTPsec before 1.2.4…
An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record who...
