Ntpsec - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/ntpsec/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 17:10:06 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNTPsec ntpd: Out-of-bounds read in NTS extension field parsing (CVE-2026-102486)https://feed.craftedsignal.io/briefs/2026-10-ntpsec-dos/Wed, 21 Oct 2026 17:10:06 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-ntpsec-dos/NTPsec ntpd versions 1.1.4 through 1.2.5 are vulnerable to a remote denial-of-service attack due to an out-of-bounds read flaw triggered by malformed NTS extension fields.NTPsec ntpd versions 1.1.4 through 1.2.5 contain a vulnerability in the parsing of Network Time Security (NTS) extension fields. An unauthenticated remote attacker can send a crafted NTS Authenticator and Encrypted Extension Fields (AEEF) field containing an oversized nonce length. This triggers an out-of-bounds read, causing the ntpd daemon to crash. There is currently no mention of remote code execution or authentication bypass.

Impact

Successful exploitation results in a denial-of-service (DoS) condition, as the ntpd daemon crashes when processing the malformed AEEF packet.

Recommendation

  1. Inventory all systems running NTPsec ntpd 1.1.4 through 1.2.5.
  2. Monitor for anomalous ntpd crash events or sudden service restarts on internet-facing time synchronization servers.
  3. Patch to the latest stable release of NTPsec ntpd once the vendor provides a resolution.
]]>lowadvisorydenial-of-servicentpsecvulnerability