CVE-2025-58066CWE-406

CVE-2025-58066

Medium · published August 30, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
25.2
In the wild
Unconfirmed
What it is

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP servers running ntpd-rs. Client-only configurations are not affected. Affected users are recommended to upgrade to version 1.6.2 as soon as possible.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.2th percentile
Weakness
CWE-406 · Insufficient Control of Network Message Volume (Network Amplification)
Published
2025-08-30T01:15Z
References (2)
EPSS history
Timeline
  • 29 AUG 20:54Z
    DoS Vulnerability in ntpd-rs
    cvelistv5