<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ntp</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-26555: praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write</title><link>https://patchthecve.com/cve/CVE-2023-26555.html</link><guid>https://patchthecve.com/cve/CVE-2023-26555.html</guid><pubDate>Wed, 17 Jun 2026 05:43:35 +0000</pubDate><description>MEDIUM 6.4: praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.</description></item><item><title>CVE-2023-26554: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a &#x27;\0&#x27; character</title><link>https://patchthecve.com/cve/CVE-2023-26554.html</link><guid>https://patchthecve.com/cve/CVE-2023-26554.html</guid><pubDate>Wed, 17 Jun 2026 05:43:34 +0000</pubDate><description>MEDIUM 5.6: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a &#x27;\0&#x27; character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.</description></item><item><title>CVE-2023-26553: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number</title><link>https://patchthecve.com/cve/CVE-2023-26553.html</link><guid>https://patchthecve.com/cve/CVE-2023-26553.html</guid><pubDate>Wed, 17 Jun 2026 05:43:34 +0000</pubDate><description>MEDIUM 5.6: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.</description></item><item><title>CVE-2023-26552: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point</title><link>https://patchthecve.com/cve/CVE-2023-26552.html</link><guid>https://patchthecve.com/cve/CVE-2023-26552.html</guid><pubDate>Wed, 17 Jun 2026 05:43:34 +0000</pubDate><description>MEDIUM 5.6: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.</description></item><item><title>CVE-2023-26551: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp&lt;cpdec while loop</title><link>https://patchthecve.com/cve/CVE-2023-26551.html</link><guid>https://patchthecve.com/cve/CVE-2023-26551.html</guid><pubDate>Wed, 17 Jun 2026 05:43:34 +0000</pubDate><description>MEDIUM 5.6: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp&lt;cpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.</description></item></channel></rss>