Pendulum-project vulnerabilities
We track 3 vulnerabilities in Pendulum-project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 12, 2026.
Latest Pendulum-project vulnerabilities
- 7.5 High severity
ntpd-rs: Allocation of Resources Without Limits or Throttling
ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker can remotely induce moderate increases (2-4 times above normal) in cpu usage. When having NTS enabled on an ntpd-rs server, an attacker can create malformed NTS
- 7.5 High severity
ntpd-rs: Allocation of Resources Without Limits or Throttling
nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. No
- 7.5 High severity
ntpd-rs: Improper Handling of Length Parameter Inconsistency
ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the se