Tweede Golf (Pendulum project) ntpd-rs 0.3.1 for Rust
Approved changes feed: RSS · Atom
cpe:2.3:a:tweedegolf:ntpd-rs:0.3.1:*:*:*:*:rust:*:*part: a version: 0.3.1 update: *
| Vendor | Tweedegolf (5035864a-1000-5a87-8247-51177461a253) |
|---|---|
| Product | Ntpd Rs (a0fb72d3-a86e-50c9-9869-7b4b49ee7e76) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | rust |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/pendulum-project/ntpd-rs |
purl2cpe | 2026-06-01 10:12:33.828873 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-38528 |
vulnerable | 2026-06-08 06:41:47.634150 |
Unlimited number of NTS-KE connections can crash ntpd-rs server
HIGH (7.5)
nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. Non NTS-KE server configurations, such as the default ntpd-rs configuration, are unaffected. This vulnerability has been patched in version 1.1.3.
Published: 2024-06-28T19:28:34.664Z
Updated: 2024-08-02T04:12:25.343Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.