| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-121506 | vulnerable | vulnerable | fixed | fixed | An out-of-bounds read and write in NTS client extension field parsing ... |
| CVE-2026-121505 | vulnerable | vulnerable | fixed | fixed | An out-of-bounds read in the NTS-KE client response parser (nts_client ... |
| CVE-2026-102486 | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 ... |
| CVE-2026-102485 | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec nt ... |
| CVE-2026-102484 | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd b ... |
| CVE-2026-102483 | vulnerable | vulnerable (no DSA) | vulnerable | vulnerable | Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote atta ... |
| CVE-2026-18321 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Buffer overflow in NTPsec's Zyfer refclock allows local attacker to cr ... |
| Bug | Description |
|---|
| CVE-2023-4012 | ntpd will crash if the server is not NTS-enabled (no certificate) and ... |
| CVE-2021-22212 | ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 all ... |
| CVE-2020-15025 | ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remo ... |
| CVE-2020-13817 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote att ... |
| CVE-2020-11868 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-pat ... |
| CVE-2019-6445 | An issue was discovered in NTPsec before 1.1.3. An authenticated attac ... |
| CVE-2019-6444 | An issue was discovered in NTPsec before 1.1.3. process_control() in n ... |
| CVE-2019-6443 | An issue was discovered in NTPsec before 1.1.3. Because of a bug in ct ... |
| CVE-2019-6442 | An issue was discovered in NTPsec before 1.1.3. An authenticated attac ... |
| CVE-2018-8956 | ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote att ... |
| CVE-2018-7185 | The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attac ... |
| CVE-2018-7184 | ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating ... |
| CVE-2018-7183 | Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 throu ... |
| CVE-2018-7182 | The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows r ... |
| CVE-2018-7170 | ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authen ... |