exploit-CVE-2016-7434

CVE-2016-7434 ntpd DOS exploit Ntpd suffer from a null pointer reference which is possible to trigger to crash the application. According to NTP.org, "If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that...

CVE-2013-5211

CVE-2013-5211 PoC Network Time Protocol Daemon ntpd monlist Command Enabled DoS This Python script is used to detect CVE-2013-5211, a vulnerability found in NTP Network Time Protocol servers. Using the ntpd monlist command, this vulnerability could allow an attacker to send a series of UDP packet...

CVE-2016-7434

CVE-2016-7434 CVE-2016-7434 ntpd remote pre-auth Denial of Service PoC's/info Sources: http://dumpco.re/cve-2016-7434/ https://www.exploit-db.com/exploits/40806/ root@nop:/code/CVE-2016-7434 echo -e...

CVE-2026-121506 Out-of-bounds Write in NTPsec

An out-of-bounds read and write in NTS client extension field parsing extensclientrecv in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd, and, combined with the NTS-KE client out-of-bounds read fixed in 1.2....

CVE-2026-121506

The NTPsec software (versions before 1.2.5 ) is vulnerable to an out-of-bounds read and write during NTS client extension field parsing within the extens_client_recv function. A remote attacker capable of sending NTP server-mode replies to an NTS client can exploit this to corrupt heap memory and...

[SECURITY] Fedora 43 Update: ntpd-rs-1.7.2-3.fc43

Full-featured implementation of NTP with NTS support...

[SECURITY] Fedora 44 Update: ntpd-rs-1.7.2-3.fc44

Full-featured implementation of NTP with NTS support...

[SECURITY] Fedora 45 Update: ntpd-rs-1.7.2-3.fc45

Full-featured implementation of NTP with NTS support...

Fedora 45 : ntpd-rs (2026-d43ed51df4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d43ed51df4 advisory. Rebuild ntpd-rs with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0049, RUSTSEC-2026-0098,...

Fedora 44 : ntpd-rs (2026-3f206513bb)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3f206513bb advisory. Rebuild ntpd-rs with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0049, RUSTSEC-2026-0098,...

Fedora 43 : ntpd-rs (2026-a9929d5b4b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a9929d5b4b advisory. Rebuild ntpd-rs with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0049, RUSTSEC-2026-0098,...

CLEANSTART-2024-CO07022 ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3)

Security vulnerability affects the ntpsec package. ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...

PT-2026-133498

Name of the Vulnerable Software and Affected Versions OPNsense core versions prior to 26.7.9 Description Authenticated users with page-services-ntp-gps or PPS privileges can perform a configuration injection. By embedding carriage return and line feed CR/LF characters into the fudge and refid...

SUSE CVE-2026-102483

Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields...

SUSE CVE-2026-102484

Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies...

SUSE CVE-2026-102485

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control @@Gc reply with an out-of-range mode byte...

SUSE CVE-2026-102486

Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extension Fields AEEF field with an oversized nonce length...

Linux Distros Unpatched Vulnerability : CVE-2026-102484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memor...

Linux Distros Unpatched Vulnerability : CVE-2026-102486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and...

Linux Distros Unpatched Vulnerability : CVE-2026-102485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash nt...