CVE-2026-102486

A flaw was found in NTPsec. This flaw allows a remote attacker to cause a Denial of Service DoS by crashing the NTP daemon. The issue is caused by an out-of-bounds read vulnerability when parsing Network Time Security NTS extension fields that contain an Authenticator and Encrypted Extension Fiel...

NTPsec buffer error vulnerability

Versions NTPsec 1.1.4 through 1.2.5 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read during the parsing of NTS extension fields. Remote attackers can exploit this by providing an NTS Authenticator and Encrypted Extension Fields AEEF field with an excessive...