{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ntpsec--1.2.5/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.4,"id":"CVE-2026-121506"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["NTPsec (\u003c 1.2.5)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["NTPsec"],"content_html":"\u003cp\u003eAn out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd. When combined with an NTS-KE client out-of-bounds read vulnerability (fixed in 1.2.4), an attacker can bypass NTS authentication and set the client's time via an NTS Authenticator and Encrypted Extension Fields field whose nonce length exceeds the field.\u003c/p\u003e\n","date_modified":"2026-11-03T16:01:24Z","date_published":"2026-11-03T16:01:24Z","id":"https://feed.craftedsignal.io/briefs/2026-11-03-ntpsec-nts-cve/","summary":"NTPsec before 1.2.5 is vulnerable to an out-of-bounds read and write in NTS client extension field parsing, which can lead to heap memory corruption, service crashes, and authentication bypass.","title":"NTPsec: Heap memory corruption via NTS client extension field parsing (CVE-2026-121506)","url":"https://feed.craftedsignal.io/briefs/2026-11-03-ntpsec-nts-cve/"}],"language":"en","title":"CraftedSignal Threat Feed - NTPsec (\u003c 1.2.5)","version":"https://jsonfeed.org/version/1.1"}