Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker can remotely induce moderate increases (2-4 times above normal) in cpu usage. When having NTS enabled on an ntpd-rs server, an attacker can create malformed NTS packets that take significantly more effort for the server to respond to by requesting a large number of cookies. This can lead to degraded server performance even when a server could otherwise handle the load. This vulnerability is fixed in 1.7.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-12 | 1 | Disclosure1 |
| 2026-03-31 | 1 | Patch1 |
CVE-2026-26076 ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker can remotely induce moderate increases (2-4 times above normal) in… https://www.cve.org/CVERecord?id=CVE-2026-26076
Post summary
The text reports CVE‑2026‑26076, indicating that pre‑1.7.1 ntpd‑rs can be exploited to cause moderate time increases, but provides no PoC, exploit, active exploitation evidence, or patch details.
BREAKING: Fedora patches critical DoS bug CVE-2026-26076 in ntpd-rs for Fedora 42 and 43, fix available in version 1.7.1 via dnf. https://threatcluster.io/cluster/critical-dos-vulnerability-in-fedora-ntp-service-addressed-230c91a8
Post summary
Fedora has released a critical DoS patch for CVE‑2026‑26076 in ntpd-rs, available in version 1.7.1 via dnf. No exploit or PoC details are mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tweedegolf | ntpd-rs | - | rust | - |