CVE-2025-58066 MEDIUM

CVE-2025-58066: DoS Vulnerability in ntpd-rs

Vendor Pendulum-Project
Product ntpd-rs
Weakness CWE-406
Published August 29, 2025
Last update September 2, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP servers running ntpd-rs. Client-only configurations are not affected. Affected users are recommended to upgrade to version 1.6.2 as soon as possible.

Key dates

02Disclosure timeline

August 29, 2025 CVE published
September 2, 2025 Record updated