CVE-2024-38528

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This allows an unauthenticated remote attacker to crash ntpd-rs when an NTS-KE server is configured. Non NTS-KE server configurations, such as the default ntpd-rs configuration, are unaffected. This vulnerability has been patched in version 1.1.3.

• CWE-770

• https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-2xpx-vcmq-5f72
• https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-2xpx-vcmq-5f72

Published

Jun 28, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-38522Hush Line is a free and open-source, anonymous-tip-line-as-a…6.3
• CVE-2024-38523Hush Line is a free and open-source, anonymous-tip-line-as-a…7.5
• CVE-2024-38524GeoServer is an open source server that allows users to shar…7.5
• CVE-2024-38525dd-trace-cpp is the Datadog distributed tracing for C++. Whe…7.5
• CVE-2024-38526pdoc provides API Documentation for Python Projects. Documen…7.2
• CVE-2024-38527ZenUML is JavaScript-based diagramming tool that requires no…5.4
• CVE-2024-38529Admidio is a free, open source user management system for we…8.8
• CVE-2024-3853A use-after-free could result if a JavaScript realm was in t…7.5
• CVE-2024-38530The Open eClass platform (formerly known as GUnet eClass) is…9.8
• CVE-2024-38531Nix is a package manager for Linux and other Unix systems th…3.6
• CVE-2024-38532The NXP Data Co-Processor (DCP) is a built-in hardware modul…7.1
• CVE-2024-38533ZKsync Era is a layer 2 rollup that uses zero-knowledge proo…6.5