NTPsec (< 1.2.5) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ntpsec--1.2.5/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 03 Nov 2026 16:01:24 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNTPsec: Heap memory corruption via NTS client extension field parsing (CVE-2026-121506)https://feed.craftedsignal.io/briefs/2026-11-03-ntpsec-nts-cve/Tue, 03 Nov 2026 16:01:24 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-03-ntpsec-nts-cve/NTPsec before 1.2.5 is vulnerable to an out-of-bounds read and write in NTS client extension field parsing, which can lead to heap memory corruption, service crashes, and authentication bypass.<p>An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd. When combined with an NTS-KE client out-of-bounds read vulnerability (fixed in 1.2.4), an attacker can bypass NTS authentication and set the client's time via an NTS Authenticator and Encrypted Extension Fields field whose nonce length exceeds the field.</p> highadvisory