607 matches found
[SECURITY] Fedora 42 Update: ntpd-rs-1.5.0-1.fc42
Full-featured implementation of NTP with NTS support...
[SECURITY] Fedora 41 Update: ntpd-rs-1.5.0-1.fc41
Full-featured implementation of NTP with NTS support...
Fedora 41 : ntpd-rs (2025-e9be11b9ba)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e9be11b9ba advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...
Fedora 40 : ntpd-rs (2025-66b73d6c72)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-66b73d6c72 advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...
GHSA-4P46-PWFR-66X6 vulnerabilities
Vulnerabilities for packages: buck2, wasmtime, oranda, zed, shadowsocks-rust, tealdeer, pixi, wadm, sccache, nushell, samply, ntpd-rs, wash, kdash, rustup, zola, cargo-audit, deno, qdrant, rye, wasm-pack, zizmor, lychee, parseable, uv, rustls-ffi, atuin, sqlx, sdp-k8s-injector, fnm, xh, wasmcloud...
Linux Distros Unpatched Vulnerability : CVE-2016-9311
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a...
Linux Distros Unpatched Vulnerability : CVE-2018-7170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral...
Linux Distros Unpatched Vulnerability : CVE-2016-4955
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service peer-variable clearing and association outage by...
Linux Distros Unpatched Vulnerability : CVE-2015-5146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a...
Linux Distros Unpatched Vulnerability : CVE-2016-4956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service interleaved-mode transition and time change via a spoofed broadcast packet...
GHSA-V83Q-83HJ-RW38 ntpd NTS client denial of service via wrongly sized cookies
Two denial of service vulnerabilities were found in ntpd-rs related to the handling of NTS cookies in our client functionality. Whenever an NTS source is configured and the server behind that source is sending zero-sized cookies or cookies larger than what would fit in our buffer size, ntpd-rs...
ntpd NTS client denial of service via wrongly sized cookies
Two denial of service vulnerabilities were found in ntpd-rs related to the handling of NTS cookies in our client functionality. Whenever an NTS source is configured and the server behind that source is sending zero-sized cookies or cookies larger than what would fit in our buffer size, ntpd-rs...
CVE-2024-57979
The CVE-2024-57979 entry is supported by connected documents detailing a Linux kernel use-after-free in pps during device teardown. The root cause is described as pps_device_destruct() freeing the pps_device immediately after cdev_del(), while fops from previously opened cdevs may still be callab...
openSUSE Security Advisory (openSUSE-SU-2024:0300-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-38528
nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. Non NTS-KE server configurations, such ...
GHSA-QG5G-GV98-5FFH vulnerabilities
Vulnerabilities for packages: ntpd-rs, wash, zed, parseable, uv, fnm, xh, tealdeer, pixi, wasmcloud, wadm, cargo-audit, qdrant, wasm-pack...
openSUSE 15 Security Update : ntpd-rs (openSUSE-SU-2024:0331-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0331-1 advisory. - Introducing ntpd-rs version 1.2.3. Tenable has extracted the preceding description block directly from the SUSE security advisory. Note that Nessus has...
openSUSE Security Advisory (openSUSE-SU-2024:0331-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for ntpd-rs (moderate)
openSUSE Security Update: Security update for ntpd-rs Announcement ID: openSUSE-SU-2024:0331-1 Rating: moderate References: Cross-References: CVE-2024-38528 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description: This update for ntpd-...