Cisco Identifies Multiple Vulnerabilities in Network Time Protocol daemon (ntpd)
Summary: Cisco's Talos Group and Advanced Security Initiatives Group identified vulnerabilities in the Network Time Protocol daemon (ntpd) and released 8 advisories in coordination with the NTP Project, which issued a Security Advisory and a patched version of ntpd. The work was done under Cisco's role on the Linux Foundation Core Infrastructure Initiative Steering Group, which was formed in April 2014 after Heartbleed to secure widely used open source projects.
What's compelling: ntpd ships with Mac OS X, major Linux distributions, BSDs, and a wide range of network and embedded devices, so a single set of flaws in a time-synchronization package reaches an unusually broad installed base. Cisco also published Snort rules 35831, 36250-36253, and 36536 to detect exploitation attempts, and notes those rules may change as more vulnerability information emerges.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026