CVE-2026-102486

Published: Ott 21, 2026 Last Modified: Ott 21, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,5
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high

Description

AI Translation Available

Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extension Fields (AEEF) field with an oversized nonce length.

125

Out-of-bounds Read

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Availability Other
Potential Impacts:
Read Memory Bypass Protection Mechanism Dos: Crash, Exit, Or Restart Varies By Context
Applicable Platforms
Languages: Memory-Unsafe, C, C++
Technologies: ICS/OT
View CWE Details
https://gitlab.com/NTPsec/ntpsec/-/commit/7cc079387
https://gitlab.com/NTPsec/ntpsec/-/commit/7cc079387
https://gitlab.com/NTPsec/ntpsec/-/work_items/891
https://gitlab.com/NTPsec/ntpsec/-/work_items/891
https://gitlab.com/NTPsec/ntpsec/-/work_items/895
https://gitlab.com/NTPsec/ntpsec/-/work_items/895