https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:20:00 +0000 https://cve.radiocsirt.org/vuln/cve-2021-22212 <p><strong>Affected:</strong> ntpsec</p> <p>ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with &#39;#&#39; characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the &#39;#&#39;. This results in the administrator not being able to use the keys as expected or the keys are shorter than expected and easier to brute-force, possibly resulting in MITM attacks between ntp clients and ntp servers. For short AES128 keys, ntpd generates a warning that it is padding them.</p> <p><strong>Affected:</strong> ntpsec</p> <p>ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with &#39;#&#39; characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the &#39;#&#39;. This results in the administrator not being able to use the keys as expected or the keys are shorter than expected and easier to brute-force, possibly resulting in MITM attacks between ntp clients and ntp servers. For short AES128 keys, ntpd generates a warning that it is padding them.</p> https://cve.radiocsirt.org/vuln/cve-2021-22212