{"id":"EUVD-2025-26241","enisaUuid":"8ca939bc-7c01-3aee-9abe-f647449b0812","description":"nptd-rs is a tool for synchronizing your computer\u0027s clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP servers running ntpd-rs. Client-only configurations are not affected. Affected users are recommended to upgrade to version 1.6.2 as soon as possible.","datePublished":"Aug 29, 2025, 8:54:13 PM","dateUpdated":"Sep 2, 2025, 1:53:59 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-4855-q42w-5vr4\nhttps://github.com/pendulum-project/ntpd-rs/commit/da37cf167736cbd4d7804b1ed7ceb572468298e0\n","aliases":"CVE-2025-58066\nGHSA-4855-q42w-5vr4\n","assigner":"GitHub_M","epss":0.33,"enisaIdProduct":[{"id":"69afa130-5b5c-374f-90b9-b9ff3a5aeefa","product":{"name":"ntpd-rs","vendor":{"name":"pendulum-project"}},"product_version":"1.2.0, \u003c 1.6.2"}],"enisaIdVendor":[{"id":"4b5c3bfe-cdf7-3306-9619-76c5ef3b079a","vendor":{"name":"pendulum-project"}}],"enisaIdVulnerability":[{"id":"6bbcbd7a-3928-3c2a-b7ea-03f8d028adfc","vulnerability":{"id":"CVE-2025-58066","description":"nptd-rs is a tool for synchronizing your computer\u0027s clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP servers running ntpd-rs. Client-only configurations are not affected. Affected users are recommended to upgrade to version 1.6.2 as soon as possible.","datePublished":"Aug 29, 2025, 8:54:13 PM","dateUpdated":"Sep 2, 2025, 1:53:59 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-4855-q42w-5vr4\nhttps://github.com/pendulum-project/ntpd-rs/commit/da37cf167736cbd4d7804b1ed7ceb572468298e0\n","enisa_id":"EUVD-2025-26241\n","assigner":"GitHub_M","epss":0.33,"dataProcessed":"Nov 6, 2026, 7:15:18 AM","vulnerabilityProduct":[{"id":"50cc2543-f4de-3367-b867-55850e4e0e5a","product":{"name":"ntpd-rs","vendor":{"name":"pendulum-project"}},"product_version":"1.2.0, \u003c 1.6.2"},{"id":"ace9957f-5e15-48cf-8ffa-8449013b7517","product":{"name":"ntpd-rs","vendor":{"name":"pendulum-project"}},"product_version":"1.2.0, \u003c 1.6.2"}],"vulnerabilityVendor":[{"id":"77b163e0-f8e5-3540-9db3-ab8db73d945d","vendor":{"name":"pendulum-project"}}]}},{"id":"6fe1d22a-6272-3259-b6c8-5ae5436c1de8","vulnerability":{"id":"GHSA-4855-q42w-5vr4","description":"DoS Vulnerability in ntpd-rs","datePublished":"Aug 29, 2025, 8:07:27 PM","dateUpdated":"Aug 29, 2025, 9:58:17 PM","baseScore":0.0,"references":"https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-4855-q42w-5vr4\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-58066\nhttps://github.com/pendulum-project/ntpd-rs/commit/da37cf167736cbd4d7804b1ed7ceb572468298e0\nhttps://github.com/pendulum-project/ntpd-rs\n","enisa_id":"EUVD-2025-26241\n","aliases":"GHSA-4855-q42w-5vr4\nCVE-2025-58066\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:12:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}