Lucene search
+L

7 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-1616

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00708EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/23 3:51 a.m.•14 views

CVE-2023-33192

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

7.5CVSS6.8AI score0.00708EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/28 5:46 p.m.•19 views

GHSA-V83Q-83HJ-RW38 ntpd NTS client denial of service via wrongly sized cookies

Two denial of service vulnerabilities were found in ntpd-rs related to the handling of NTS cookies in our client functionality. Whenever an NTS source is configured and the server behind that source is sending zero-sized cookies or cookies larger than what would fit in our buffer size, ntpd-rs...

5.3CVSS7.6AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/02/28 12:00 a.m.•11 views

PT-2025-9200 · Ntpd-Rs · Ntpd-Rs

Name of the Vulnerable Software and Affected Versions: ntpd-rs versions prior to 1.5.0 Description: Two denial of service issues were found in the handling of NTS cookies in the client functionality. These issues can cause ntpd-rs to crash when an NTS source is configured and the server sends...

5.3CVSS7.5AI score
SaveExploits0References5
Prion
Prion
•added 2023/05/27 4:15 a.m.•31 views

Design/Logic Flaw

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

5CVSS7.5AI score0.00708EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/27 12:00 a.m.•3 views

CVE-2023-33192: Improper Handling of Length Parameter Inconsistency

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

7.5CVSS5.8AI score0.00708EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/25 12:00 a.m.•19 views

PT-2023-24209 · Ntpd-Rs · Ntpd-Rs

Name of the Vulnerable Software and Affected Versions: ntpd-rs versions prior to 0.3.3 Description: ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter tha...

7.5CVSS7.4AI score0.00708EPSS
SaveExploits0References8
Rows per page
Query Builder