ALT-PU-2026-20965-1

Обновление пакета ntpsec в ветке sisyphus

Версия1.2.6-alt1

Задание#439759

Опубликовано2026-11-04

Макс. серьёзностьHIGH

Серьёзность:

Закрытые проблемы (4)

CVE-2026-102483

HIGH7.5

Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.

Опубликовано: 2026-10-21Изменено: 2026-10-29

CVSS 3.xВЫСОКАЯ 7.5

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Ссылки

CVE-2026-102484

MEDIUM6.4

Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies.

Опубликовано: 2026-10-21Изменено: 2026-10-29

CVSS 3.xСРЕДНЯЯ 6.4

CVSS:3.x/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Ссылки

CVE-2026-102485

MEDIUM5.2

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control (@@Gc) reply with an out-of-range mode byte.

Опубликовано: 2026-10-21Изменено: 2026-10-29

CVSS 3.xСРЕДНЯЯ 5.2

CVSS:3.x/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Ссылки

CVE-2026-102486

HIGH7.5

Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extension Fields (AEEF) field with an oversized nonce length.

Опубликовано: 2026-10-21Изменено: 2026-10-29

CVSS 3.xВЫСОКАЯ 7.5

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Ссылки