Source: ntpsec Version: 1.2.5+dfsg-1 X-Debbugs-CC: [email protected] Severity: important Tags: security upstream
Hi, The following vulnerabilities were published for ntpsec. CVE-2026-102483[0]: | Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote | attacker to terminate the daemon via an NTS request with excess NTS | Cookie Placeholder extension fields. CVE-2026-102484[1]: | Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd | before 1.2.6 allows an attacker who controls the Telephone JJY time | source to corrupt memory or crash ntpd via more than six time | replies. CVE-2026-102485[2]: | Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec | ntpd before 1.2.6 allows an attacker who controls the GPS receiver's | serial data to crash ntpd or disclose memory via a PPS Control | (@@Gc) reply with an out-of-range mode byte. CVE-2026-102486[3]: | Out-of-bounds read in NTS extension field parsing in NTPsec ntpd | 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via | an NTS Authenticator and Encrypted Extension Fields (AEEF) field | with an oversized nonce length. If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-102483 https://www.cve.org/CVERecord?id=CVE-2026-102483 [1] https://security-tracker.debian.org/tracker/CVE-2026-102484 https://www.cve.org/CVERecord?id=CVE-2026-102484 [2] https://security-tracker.debian.org/tracker/CVE-2026-102485 https://www.cve.org/CVERecord?id=CVE-2026-102485 [3] https://security-tracker.debian.org/tracker/CVE-2026-102486 https://www.cve.org/CVERecord?id=CVE-2026-102486 Regards, Salvatore
