608 matches found
exploit-CVE-2016-7434
CVE-2016-7434 ntpd DOS 漏洞利用 ntpd 存在一个空指针引用问题,可被触发从而导致应用程序崩溃。根据 NTP.org 的说法,“如果 ntpd 被配置为允许来自服务器的 mrulist 查询请求,而该服务器发送了精心构造的恶意数据包,那么 ntpd 在收到该精心构造的恶意 mrulist 查询数据包时将会崩溃。” ntpd 程序是一个操作系统守护进程,负责设置并维护计算机系统的系统时间,使其与互联网标准时间服务器保持同步。它是网络时间协议(NTP)第 4 版的完整实现,同时保留了与第 1、2、3 版的兼容性。 读取 MRU...
CVE-2013-5211
CVE-2013-5211 PoC Network Time Protocol Daemon ntpd monlist コマンド有効化によるDoS このPythonスクリプトは、NTP(Network Time Protocol)サーバーに見られる脆弱性CVE-2013-5211を検出するために使用されます。この脆弱性は、ntpd monlistコマンドを使用することで、攻撃者がサーバーに一連のUDPパケットを送信し、サーバーのリソースを消費させる可能性があります。...
CVE-2016-7434
CVE-2016-7434 CVE-2016-7434 ntpd 远程预认证拒绝服务 PoC/信息 来源: http://dumpco.re/cve-2016-7434/ https://www.exploit-db.com/exploits/40806/ root@nop:/code/CVE-2016-7434 echo -e...
Astra Linux – Vulnerability in NTP
In the file libntp/mstolfp.c, within the NTP version 4.2.8p15, there is a buffer overflow vulnerability in the while loop of the cpcpdec function. An adversary could potentially attack a client NTPQ process, but they cannot attack the ntpd process...
GO-2025-3678 vulnerabilities
Vulnerabilities for packages: wasmcloud, linkerd-extension-init, wasmtime, sdp-k8s-injector, rye, zizmor, buck2, sccache, atuin, shadowsocks-rust, cargo-audit, zed, ntpd-rs, qdrant, rustup, xh, oranda, kdash, uv, parseable, pixi, wash, zola, rustls-ffi, linkerd2-proxy, wasm-pack, deno, tealdeer,...
CVE-2026-18321
A flaw was found in NTPsec. A local attacker could exploit a buffer overflow vulnerability in the Zyfer refclock component, leading to the ntpd daemon crashing. This could result in a denial of service DoS, making the network time synchronization service unavailable...
UBUNTU-CVE-2026-18321
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
CVE-2026-18321
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
CVE-2026-18321 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in ntpsec
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
CVE-2026-18321 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in ntpsec
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
CVE-2026-18321
CVE-2026-18321 describes a buffer overflow in NTPsec’s Zyfer refclock that can crash ntpd via a local attack. The CVE is listed as a classic buffer overflow (Buffer Copy without Checking Size of Input) affecting ntpsec, but the provided documents do not specify affected versions, exact vulnerable...
CVE-2026-18321
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
Linux Distros Unpatched Vulnerability : CVE-2026-18321
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd CVE-2026-18321 Note that Nessus relies on the presence of the package as reported...
CLEANSTART-2026-WD15251 Security fixes in ntpd-rs 1.6.2-r1
Package ntpd-rs version 1.6.2-r1 fixes 3 vulnerabilities: ghsa-65p9-r9h6-22vj, ghsa-hfpc-8r3f-gw53, ghsa-vw5v-4f2q-w9xf...
GHSA-XGP8-3HG3-C2MH vulnerabilities
Vulnerabilities for packages: py3-xet-core, wasmcloud, berg, ztunnel, linkerd-extension-init, wasmtime, sdp-k8s-injector, rye, zizmor, buck2, sccache, atuin, shadowsocks-rust, cargo-audit, ntpd-rs, qdrant, rustup, xh, kdash, uv, parseable, pixi, zola, linkerd2-proxy, wasm-pack, deno, tealdeer,...
GHSA-965H-392X-2MH5 vulnerabilities
Vulnerabilities for packages: py3-xet-core, wasmcloud, berg, ztunnel, linkerd-extension-init, wasmtime, sdp-k8s-injector, rye, zizmor, buck2, sccache, atuin, shadowsocks-rust, cargo-audit, ntpd-rs, qdrant, rustup, xh, kdash, uv, parseable, pixi, zola, linkerd2-proxy, wasm-pack, deno, tealdeer,...
GHSA-XGP8-3HG3-C2MH vulnerabilities
Vulnerabilities for packages: fnm, parseable, py3-xet-core, rustup, mise, tealdeer, deno, zellij, zizmor, sentry-cli, atuin, buck2, ztunnel-fips, rye, linkerd2, cargo-audit, sccache, linkerd2-proxy, shadowsocks-rust, linkerd2-cni-plugin, sqlx, lychee, garage, berg, qdrant, linkerd-extension-init,...
GHSA-965H-392X-2MH5 vulnerabilities
Vulnerabilities for packages: fnm, parseable, py3-xet-core, rustup, mise, tealdeer, deno, zellij, zizmor, sentry-cli, atuin, buck2, ztunnel-fips, rye, linkerd2, cargo-audit, sccache, linkerd2-proxy, shadowsocks-rust, linkerd2-cni-plugin, sqlx, lychee, garage, berg, qdrant, linkerd-extension-init,...
CLEANSTART-2026-TC19665 Security fixes for ghsa-65p9-r9h6-22vj, ghsa-hfpc-8r3f-gw53, ghsa-vw5v-4f2q-w9xf applied in versions: 1.6.2-r1
Multiple security vulnerabilities affect the ntpd-rs package. These issues are resolved in later releases. See references for individual vulnerability details...