{"id":"CVE-2026-102486","summary":"Out-of-bounds Read in ntpsec","details":"Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extension Fields (AEEF) field with an oversized nonce length.","modified":"2026-10-22T02:47:55.143525620Z","published":"2026-10-21T15:04:01.274Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102486.json","unresolved_ranges":[{"extracted_events":[{"range":[{"introduced":"1.1.4"},{"fixed":"1.2.6"}],"source":"AFFECTED_FIELD","strategy":"StandardRange"}]}],"cna_assigner":"GitLab","cwe_ids":["CWE-125"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102486.json"},{"type":"PACKAGE","url":"https://gitlab.com/NTPsec/ntpsec"},{"type":"FIX","url":"https://gitlab.com/NTPsec/ntpsec/-/commit/7cc079387"},{"type":"WEB","url":"https://gitlab.com/NTPsec/ntpsec/-/work_items/891"},{"type":"WEB","url":"https://gitlab.com/NTPsec/ntpsec/-/work_items/895"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102486"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.com/NTPsec/ntpsec","events":[{"introduced":"79cd18fc56fc902c3a7fd78bcc32ee72f52eb396"},{"last_affected":"42b5703303c8c7e6513f3a119cfab670924dd7be"}],"database_specific":{"extracted_events":[{"source":"DESCRIPTION","range":[{"introduced":"1.1.4"},{"last_affected":"1.2.5"}]}]}}],"versions":["NTPsec_1_2_5","NTPsec_1_2_4","NTPsec_1_2_3","NTPsec_1_2_2","NTPsec_1_2_1","NTPsec_1_2_0","NTPsec_1_1_9","NTPsec_1_1_8","NTPsec_1_1_7","NTPsec_1_1_6","NTPsec_1_1_5","NTPsec_1_1_4"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102486.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}