https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:17:57.789451+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-255 certfr-2021-avi-255 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-02T23:17:57.805098+00:00 certfr-2021-avi-255 https://cve.radiocsirt.org/vuln/cnvd-2015-06120 cnvd-2015-06120 2026-10-02T23:17:57.805157+00:00 cnvd-2015-06120 https://cve.radiocsirt.org/vuln/euvd-2026-93240 EUVD-2026-93240 2026-10-02T23:17:57.805172+00:00 EUVD-2026-93240 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5219 fkie_cve-2015-5219 2026-10-02T23:17:57.805184+00:00

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.

 https://cve.radiocsirt.org/vuln/ghsa-38qh-x54p-8w2g GHSA-38qh-x54p-8w2g 2026-10-02T23:17:57.805212+00:00

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.

 https://cve.radiocsirt.org/vuln/gsd-2015-5219 gsd-2015-5219 2026-10-02T23:17:57.805227+00:00 gsd-2015-5219 https://cve.radiocsirt.org/vuln/icsa-21-103-11 ICSA-21-103-11 — Siemens TIM 4R-IE Devices 2026-10-02T23:17:57.805238+00:00

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet. The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests. The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value. Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication. NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network. NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key." ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command. NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authe…

 https://cve.radiocsirt.org/vuln/rhsa-2016:0780 RHSA-2016:0780 — Red Hat Security Advisory: ntp security and bug fix update 2026-10-02T23:17:57.805287+00:00

ntp: crash with crafted logconfig configuration command ntp: ntpd crash when processing config commands with statistics type ntp: infinite loop in sntp processing crafted packet ntp: incomplete checks in ntp_crypto.c ntp: incomplete checks in ntp_crypto.c ntp: slow memory leak in CRYPTO_ASSOC ntp: incomplete checks in ntp_crypto.c ntp: config command can be used to set the pidfile and drift file paths ntp: ntpq atoascii memory corruption vulnerability ntp: restriction list NULL pointer dereference ntp: stack exhaustion in recursive traversal of restriction list

 https://cve.radiocsirt.org/vuln/rhsa-2016:2583 RHSA-2016:2583 — Red Hat Security Advisory: ntp security and bug fix update 2026-10-02T23:17:57.805321+00:00

ntp: crash with crafted logconfig configuration command ntp: ntpd crash when processing config commands with statistics type ntp: config command can be used to set the pidfile and drift file paths ntp: infinite loop in sntp processing crafted packet ntp: incomplete checks in ntp_crypto.c ntp: incomplete checks in ntp_crypto.c ntp: slow memory leak in CRYPTO_ASSOC ntp: incomplete checks in ntp_crypto.c ntp: config command can be used to set the pidfile and drift file paths ntp: ntpq atoascii memory corruption vulnerability ntp: missing key check allows impersonation between authenticated peers (VU#357792) ntp: restriction list NULL pointer dereference ntp: stack exhaustion in recursive traversal of restriction list ntp: off-path denial of service on authenticated broadcast mode ntp: potential infinite loop in ntpq

 https://cve.radiocsirt.org/vuln/suse-su-2016:1311-1 SUSE-SU-2016:1311-1 — Security update for ntp 2026-10-02T23:17:57.805358+00:00

Security update for ntp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5219 UBUNTU-CVE-2015-5219 2026-10-02T23:17:57.805384+00:00

Affected: Ubuntu:14.04:LTS: ntp

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.