Remote Termination Vulnerability in NTPsec NTP Daemon

CVE-2026-102483

What is CVE-2026-102483?

The NTPsec NTP daemon versions 1.1.4 to 1.2.5 contain a vulnerability that allows a remote attacker to terminate the daemon. This issue arises when processing an NTS (Network Time Security) request accompanied by surplus NTS Cookie Placeholder extension fields. By exploiting this vulnerability, an attacker can disrupt time synchronization services by effectively stopping the NTP daemon, potentially leading to a degradation of network services relying on accurate time information.

References