NTPsec vulnerabilities
We track 4 vulnerabilities in NTPsec products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 3, 2026.
Latest NTPsec vulnerabilities
- 7.4 High severity
NTPsec: Out-of-bounds Write
An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd, and, combined with the NTS-K
- 7.5 High severity
ntpsec: Out-of-bounds Read
Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extension Fields (AEEF) field with an oversized nonce length.
- 7.5 High severity
ntpsec: Reachable Assertion
Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.
- 9.6 Critical severity
gpsd: Improper Neutralization of Special Elements used in an OS Command
gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot ti