Veille CVE

Recherche « ntpsec »

6 CVE

Critique 1 Élevée 2 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « ntpsec » ✕
  1. CVE-2026-102486 7.5 Élevée

    ntpsec

    Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extension Fields (AEEF) field with an oversized nonce length.

  2. CVE-2026-102485 5.2 Moyenne

    ntpsec

    Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control (@@Gc) reply with an out-of-range mode byte.

  3. CVE-2026-102484 6.4 Moyenne

    ntpsec

    Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies.

  4. CVE-2026-102483 7.5 Élevée

    ntpsec

    Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.

  5. CVE-2026-18321 4.7 Moyenne

    ntpsec

    Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd

  6. CVE-2026-58459 9.6 Critique

    ntpsec gpsd · Gpsd project gpsd

    gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot title without proper escaping. The subtype field sourced from a DEVICES JSON log entry or NMEA PGRMT sentence is written into a generated gnuplot program via a set title statement with only double-quote characters escaped, enabling arbitrary shell command execution as the user running gnuplot when the victim renders the generated plot through the gpsprof and gnuplot workflow.