https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:37:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03304 bdu:2021-03304 https://cve.radiocsirt.org/vuln/bdu:2021-03304 https://cve.radiocsirt.org/vuln/euvd-2026-22787 EUVD-2026-22787 https://cve.radiocsirt.org/vuln/euvd-2026-22787 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22212 <p>ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with &#39;#&#39; characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the &#39;#&#39;. This results in the administrator not being able to use the keys as expected or the keys are shorter than expected and easier to brute-force, possibly resulting in MITM attacks between ntp clients and ntp servers. For short AES128 keys, ntpd generates a warning that it is padding them.</p> <p>ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with &#39;#&#39; characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the &#39;#&#39;. This results in the administrator not being able to use the keys as expected or the keys are shorter than expected and easier to brute-force, possibly resulting in MITM attacks between ntp clients and ntp servers. For short AES128 keys, ntpd generates a warning that it is padding them.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-22212 https://cve.radiocsirt.org/vuln/ghsa-57r9-f9gp-9f2x <p>ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with &#39;#&#39; characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the &#39;#&#39;. This results in the administrator not being able to use the keys as expected or the keys are shorter than expected and easier to brute-force, possibly resulting in MITM attacks between ntp clients and ntp servers. For short AES128 keys, ntpd generates a warning that it is padding them.</p> <p>ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with &#39;#&#39; characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the &#39;#&#39;. This results in the administrator not being able to use the keys as expected or the keys are shorter than expected and easier to brute-force, possibly resulting in MITM attacks between ntp clients and ntp servers. For short AES128 keys, ntpd generates a warning that it is padding them.</p> https://cve.radiocsirt.org/vuln/ghsa-57r9-f9gp-9f2x https://cve.radiocsirt.org/vuln/gsd-2021-22212 gsd-2021-22212 https://cve.radiocsirt.org/vuln/gsd-2021-22212 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11103-1 <p>libntpc1-1.2.1-1.2 on GA media</p> <p>libntpc1-1.2.1-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11103-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22212 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: ntpsec, Ubuntu:20.04:LTS: ntpsec</p> <p>ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with &#39;#&#39; characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the &#39;#&#39;. This results in the administrator not being able to use the keys as expected or the keys are shorter than expected and easier to brute-force, possibly resulting in MITM attacks between ntp clients and ntp servers. For short AES128 keys, ntpd generates a warning that it is padding them.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: ntpsec, Ubuntu:20.04:LTS: ntpsec</p> <p>ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with &#39;#&#39; characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the &#39;#&#39;. This results in the administrator not being able to use the keys as expected or the keys are shorter than expected and easier to brute-force, possibly resulting in MITM attacks between ntp clients and ntp servers. For short AES128 keys, ntpd generates a warning that it is padding them.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22212