CVE-2026-102484
Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an…
- Risk score
- 42/100
- CVSS
- 6.4 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 21 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies.
- Affected
- See advisory
- Fix
- Upgrade the product to 1.2.6 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 6.4 medium
References
Original description
Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies.
Last activity 21 Oct 2026. Patch Forecast updates every hour.