GO-2025-3678 vulnerabilities

Vulnerabilities for packages: atuin, ntpd-rs, nushell, zola, xh, linkerd-extension-init, rye, sqlx, kdash, sdp-k8s-injector, parseable, shadowsocks-rust, lychee, samply, wadm, wasmcloud, oranda, uv, wasm-pack, zizmor, linkerd2-proxy, deno, rustls-ffi, rustup, wash, pixi, cargo-audit, tealdeer,...

CVE-2026-18321

A flaw was found in NTPsec. A local attacker could exploit a buffer overflow vulnerability in the Zyfer refclock component, leading to the ntpd daemon crashing. This could result in a denial of service DoS, making the network time synchronization service unavailable...

UBUNTU-CVE-2026-18321

Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...

CVE-2026-18321

Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...

CVE-2026-18321 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in ntpsec

Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...

CVE-2026-18321 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in ntpsec

Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...

CVE-2026-18321

Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...

CVE-2026-18321

CVE-2026-18321 describes a buffer overflow in NTPsec’s Zyfer refclock that can crash ntpd via a local attack. The CVE is listed as a classic buffer overflow (Buffer Copy without Checking Size of Input) affecting ntpsec, but the provided documents do not specify affected versions, exact vulnerable...

Linux Distros Unpatched Vulnerability : CVE-2026-18321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd CVE-2026-18321 Note that Nessus relies on the presence of the package as reported...

Astra Linux – Vulnerability in NTP

In the file libntp/mstolfp.c, within the NTP version 4.2.8p15, there is a buffer overflow vulnerability in the while loop of the cpcpdec function. An adversary could potentially attack a client NTPQ process, but they cannot attack the ntpd process...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: atuin, ntpd-rs, linkerd2, zola, xh, py3-xet-core, linkerd-extension-init, rye, sqlx, kdash, sdp-k8s-injector, ztunnel, parseable, shadowsocks-rust, lychee, samply, zellij, berg, wasmcloud, uv, wasm-pack, zizmor, linkerd2-proxy, deno, rustup, pixi, cargo-audit,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: atuin, ntpd-rs, linkerd2, zola, xh, py3-xet-core, linkerd-extension-init, rye, sqlx, kdash, sdp-k8s-injector, ztunnel, parseable, shadowsocks-rust, lychee, samply, zellij, berg, wasmcloud, uv, wasm-pack, zizmor, linkerd2-proxy, deno, rustup, pixi, cargo-audit,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: wasm-pack, buck2, pixi, asciinema, linkerd-network-validator, py3-xet-core, samply, zola, parseable, uv, ztunnel, sentry-cli, shadowsocks-rust, linkerd2-proxy, lakekeeper, komodo, qdrant, tealdeer, zellij, fnm, linkerd2, sqlx, lychee, mise, rye, wasmtime, zizmor,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: wasm-pack, buck2, pixi, asciinema, linkerd-network-validator, py3-xet-core, samply, zola, parseable, uv, ztunnel, sentry-cli, shadowsocks-rust, linkerd2-proxy, lakekeeper, komodo, qdrant, tealdeer, zellij, fnm, linkerd2, sqlx, lychee, mise, rye, wasmtime, zizmor,...

CLEANSTART-2026-TC19665 Security fixes for ghsa-65p9-r9h6-22vj, ghsa-hfpc-8r3f-gw53, ghsa-vw5v-4f2q-w9xf applied in versions: 1.6.2-r1

Multiple security vulnerabilities affect the ntpd-rs package. These issues are resolved in later releases. See references for individual vulnerability details...

[SECURITY] Fedora 43 Update: ntpd-rs-1.7.1-1.fc43

Full-featured implementation of NTP with NTS support...

Fedora: Security Advisory (FEDORA-2026-cbe2315bad)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : ntpd-rs (2026-2dc4882154)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2dc4882154 advisory. Update to version 1.7.1. Includes the fix for CVE-2026-26076: Release notes: - - Tenable has extracted the preceding description block directly from the Fedo...

Fedora: Security Advisory (FEDORA-2026-2dc4882154)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : ntpd-rs (2026-cbe2315bad)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cbe2315bad advisory. Update to version 1.7.1. Includes the fix for CVE-2026-26076: Release notes: - - Tenable has extracted the preceding description block directly from the Fedo...