Fedora 40 : ntpd-rs (2025-66b73d6c72)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-66b73d6c72 advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...

GHSA-4P46-PWFR-66X6 vulnerabilities

Vulnerabilities for packages: deno, parseable, rustls-ffi, uv, zizmor, fnm, xh, rustup, atuin, pixi, zola, kdash, shadowsocks-rust, buck2, wasmcloud, lychee, oranda, zed, cargo-audit, qdrant, wash, rye, samply, ntpd-rs, linkerd-extension-init, wadm, wasmtime, sccache, tealdeer, nushell, sqlx,...

Linux Distros Unpatched Vulnerability : CVE-2016-9311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a...

Linux Distros Unpatched Vulnerability : CVE-2018-7170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral...

Linux Distros Unpatched Vulnerability : CVE-2016-4955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service peer-variable clearing and association outage by...

Linux Distros Unpatched Vulnerability : CVE-2015-5146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a...

Linux Distros Unpatched Vulnerability : CVE-2016-4956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service interleaved-mode transition and time change via a spoofed broadcast packet...

GHSA-V83Q-83HJ-RW38 ntpd NTS client denial of service via wrongly sized cookies

Two denial of service vulnerabilities were found in ntpd-rs related to the handling of NTS cookies in our client functionality. Whenever an NTS source is configured and the server behind that source is sending zero-sized cookies or cookies larger than what would fit in our buffer size, ntpd-rs...

ntpd NTS client denial of service via wrongly sized cookies

Two denial of service vulnerabilities were found in ntpd-rs related to the handling of NTS cookies in our client functionality. Whenever an NTS source is configured and the server behind that source is sending zero-sized cookies or cookies larger than what would fit in our buffer size, ntpd-rs...

CVE-2024-57979

The CVE-2024-57979 entry is supported by connected documents detailing a Linux kernel use-after-free in pps during device teardown. The root cause is described as pps_device_destruct() freeing the pps_device immediately after cdev_del(), while fops from previously opened cdevs may still be callab...

openSUSE Security Advisory (openSUSE-SU-2024:0300-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-38528

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. Non NTS-KE server configurations, such ...

GHSA-QG5G-GV98-5FFH vulnerabilities

Vulnerabilities for packages: wash, pixi, tealdeer, parseable, uv, fnm, ntpd-rs, xh, wasmcloud, zed, cargo-audit, wadm, qdrant, wasm-pack...

openSUSE 15 Security Update : ntpd-rs (openSUSE-SU-2024:0331-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0331-1 advisory. - Introducing ntpd-rs version 1.2.3. Tenable has extracted the preceding description block directly from the SUSE security advisory. Note that Nessus has...

openSUSE Security Advisory (openSUSE-SU-2024:0331-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for ntpd-rs (moderate)

openSUSE Security Update: Security update for ntpd-rs Announcement ID: openSUSE-SU-2024:0331-1 Rating: moderate References: Cross-References: CVE-2024-38528 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description: This update for ntpd-...

OPENSUSE-SU-2024:0331-1 Security update for ntpd-rs

This update for ntpd-rs fixes the following issues: - Introducing ntpd-rs version 1.2.3...

Synology DiskStation Manager NTPD Victim's Clock Modification (CVE-2018-7170)

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an...

Synology DiskStation Manager NTPD Denial of Service (CVE-2018-7184)

ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the received timestamp, which allows remote attackers to cause a denial of service disruption by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most...

Synology DiskStation Manager NTPD Denial of Service (CVE-2018-7185)

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service disruption by continually sending a packet with a zero-origin timestamp and source IP address of the other side of an interleaved association causing the victim ntpd to reset its association...