Approved changes feed: RSS · Atom
cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ntpsec (c7e54110-3f4d-5834-80af-76a04baa27a4) |
|---|---|
| Product | Ntpsec (3147871e-e611-5dde-9369-37c846d2a777) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/ntpsec/ntpsec |
purl2cpe | 2026-06-01 10:15:00.830455 |
pkg:deb/debian/ntpsec |
purl2cpe | 2026-06-01 10:15:00.830457 |
pkg:deb/ubuntu/ntpsec |
purl2cpe | 2026-06-01 10:15:00.830459 |
pkg:github/ntpsec/ntpsec |
purl2cpe | 2026-06-01 10:15:00.830460 |
pkg:rpm/fedora/ntpsec |
purl2cpe | 2026-06-01 10:15:00.830461 |
pkg:rpm/opensuse/ntpsec |
purl2cpe | 2026-06-01 10:15:00.830463 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18321 |
vulnerable | 2026-09-16 04:34:01.928391 |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in ntpsec
MEDIUM (4.7)
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd
Published: 2026-07-31T18:04:06.697Z
Updated: 2026-07-31T18:54:10.546Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4012 |
vulnerable | 2026-06-08 06:16:10.951810 |
Incomplete Internal State Distinction in ntpsec
HIGH (7.5)
ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
Published: 2023-08-07T17:30:33.452Z
Updated: 2026-06-22T04:07:22.152Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22212 |
vulnerable | 2026-06-08 05:30:00.015604 |
Details available
MEDIUM (4)
ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '#' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the '#'. This results in the administrator not being able to use the keys as expected or the keys are shorter than expected and easier to brute-force, possibly resulting in MITM attacks between ntp clients and ntp servers. For short AES128 keys, ntpd generates a warning that it is padding them.
Published: 2021-06-08T12:07:02.000Z
Updated: 2024-08-03T18:37:18.446Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6445 |
vulnerable | 2026-06-08 05:14:11.525526 |
Details available
An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem.
Published: 2019-01-16T05:00:00.000Z
Updated: 2024-08-04T20:23:20.977Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6444 |
vulnerable | 2026-06-08 05:14:11.525201 |
Details available
An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.
Published: 2019-01-16T05:00:00.000Z
Updated: 2024-08-04T20:23:20.997Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6443 |
vulnerable | 2026-06-08 05:14:11.524840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6442 |
vulnerable | 2026-06-08 05:14:11.524380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.