Fedora 41 : ntpd-rs (2025-ee9b86c6d9)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ee9b86c6d9 advisory. Update to version 1.6.2. Includes fixes for CVE-2025-58066 potential DoS in the ntpd-rs server and CVE-2025-58160 potential tracing log pollution...

Fedora 42 : ntpd-rs (2025-7fbf258406)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7fbf258406 advisory. Update to version 1.6.2. Includes fixes for CVE-2025-58066 potential DoS in the ntpd-rs server and CVE-2025-58160 potential tracing log pollution...

Fedora 43 : ntpd-rs (2025-cf3fbd8fcf)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cf3fbd8fcf advisory. Update to version 1.6.2. Includes fixes for CVE-2025-58066 potential DoS in the ntpd-rs server and CVE-2025-58160 potential tracing log pollution...

GHSA-XWFJ-JGWM-7WP5 vulnerabilities

Vulnerabilities for packages: linkerd2, ruff, cargo-c, mountpoint-s3, wadm, topgrade, berg, linkerd2-proxy, ztunnel, pixi, oranda, wasmcloud, wasmtime, pgcat, yazi, linkerd-network-validator, cargo-audit, parseable, atuin, rustup, buck2, kdash, shadowsocks-rust, qdrant, linkerd-extension-init,...

Linux Distros Unpatched Vulnerability : CVE-2024-38528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. Thi...

Linux Distros Unpatched Vulnerability : CVE-2020-11868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofe...

CVE-2025-58066

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP...

GHSA-4855-Q42W-5VR4 DoS Vulnerability in ntpd-rs

Summary A denial of service vulnerability was discovered in ntpd-rs where an attacker can induce a message storm between two NTP servers running ntpd-rs. Details Since ntpd-rs version 1.2.0, when configured as a server, incorrectly responded to all NTP messages sent to the server's port with a ti...

Fedora 42 : ntpd-rs (2025-c480cf7e5e)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c480cf7e5e advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...

Fedora: Security Advisory (FEDORA-2025-c480cf7e5e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-e9be11b9ba)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-33192

ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes...

CVE-2025-4432 vulnerabilities

Vulnerabilities for packages: sqlx, samply, sccache, tealdeer, wasm-pack, lychee, wadm, nushell, linkerd2-proxy, pixi, oranda, wasmcloud, wasmtime, zed, zola, rustls-ffi, deno, cargo-audit, parseable, atuin, rustup, buck2, kdash, shadowsocks-rust, qdrant, linkerd-extension-init, ntpd-rs, uv, wash...

GHSA-C86P-W88R-QVQR vulnerabilities

Vulnerabilities for packages: buck2, kdash, sqlx, samply, ntpd-rs, sccache, lychee, wash, oranda, cargo-audit, rye, wasmtime, zola, xh...

Fedora: Security Advisory (FEDORA-2025-66b73d6c72)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: ntpd-rs-1.5.0-1.fc42

Full-featured implementation of NTP with NTS support...

[SECURITY] Fedora 41 Update: ntpd-rs-1.5.0-1.fc41

Full-featured implementation of NTP with NTS support...

Fedora 41 : ntpd-rs (2025-e9be11b9ba)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e9be11b9ba advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...

Fedora 40 : ntpd-rs (2025-66b73d6c72)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-66b73d6c72 advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...

GHSA-4P46-PWFR-66X6 vulnerabilities

Vulnerabilities for packages: rustls-ffi, lychee, oranda, linkerd2-proxy, sdp-k8s-injector, fnm, shadowsocks-rust, wasmtime, atuin, tealdeer, samply, buck2, xh, rye, wasm-pack, sccache, zizmor, cargo-audit, zed, ntpd-rs, kdash, deno, pixi, zola, nushell, linkerd-extension-init, wasmcloud, qdrant,...