Skip to content
OpenAdvisories

Vendor

pendulum-project

4 known vulnerabilities.

Products

ntpd-rs 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-38528

    Unlimited number of NTS-KE connections can crash ntpd-rs server

    nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. N…

    pendulum-project ntpd-rs ntpd rust-ntpd Debian Ubuntu crates.io
  • High 7.5
    CVE-2023-33192

    Improper handling of NTS cookie length that could crash the ntpd-rs server

    ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the s…

    pendulum-project ntpd-rs ntpd crates.io