p PatchFirst

CVE-2026-102484

CVE-2026-102484 · Heap-based Buffer Overflow in ntpsec

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies.

CVSS 6.4 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • ntpsec

    Versions
    • ≥ 0, < 1.2.6: Affected (semver)

    Update to 1.2.6

  • ntpsec Debian:12

    Versions
    • 1.2.2+dfsg1-1
    • 1.2.2+dfsg1-1+deb12u1
    • 1.2.2+dfsg1-2
    • 1.2.2+dfsg1-3
    • 1.2.2+dfsg1-4
    • 1.2.3+dfsg1-1
    • 1.2.3+dfsg1-2
    • 1.2.3+dfsg1-3
    • 1.2.3+dfsg1-4
    • 1.2.3+dfsg1-5
    • 1.2.3+dfsg1-6
    • 1.2.3+dfsg1-7
    • 1.2.3+dfsg1-8
    • 1.2.4+dfsg-1
    • 1.2.5+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ntpsec Debian:13

    Versions
    • 1.2.3+dfsg1-8
    • 1.2.4+dfsg-1
    • 1.2.5+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ntpsec Debian:14

    Versions
    • 1.2.3+dfsg1-8
    • 1.2.4+dfsg-1
    • 1.2.5+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ntpsec Ubuntu:18.04:LTS

    Versions
    • 1.0.0+dfsg1-1
    • 1.0.0+dfsg1-3
    • 1.1.0+dfsg1-1
    • 1.1.0+dfsg1-1ubuntu0.1
    • 1.1.0+dfsg1-1ubuntu0.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ntpsec Ubuntu:20.04:LTS

    Versions
    • 1.1.3+dfsg1-2
    • 1.1.7+dfsg1-1
    • 1.1.7+dfsg1-2
    • 1.1.8+dfsg1-1
    • 1.1.8+dfsg1-3
    • 1.1.8+dfsg1-4
    • 1.1.8+dfsg1-4build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ntpsec Ubuntu:22.04:LTS

    Versions
    • 1.2.0+dfsg1-4
    • 1.2.1+dfsg1-2
    • 1.2.1+dfsg1-3
    • 1.2.1+dfsg1-3ubuntu1
    • 1.2.1+dfsg1-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ntpsec Ubuntu:24.04:LTS

    Versions
    • 1.2.2+dfsg1-2
    • 1.2.2+dfsg1-3
    • 1.2.2+dfsg1-4
    • 1.2.2+dfsg1-4build1
    • 1.2.2+dfsg1-4build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ntpsec Ubuntu:26.10

    Versions
    • 1.2.3+dfsg1-8ubuntu2
    • 1.2.3+dfsg1-8ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ntpsec Ubuntu:26.04:LTS

    Versions
    • 1.2.3+dfsg1-8ubuntu1
    • 1.2.3+dfsg1-8ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →