Dashboard / CVE-2026-102484

CVE-2026-102484

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 48/100
Published: 2026-10-21 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Physical
AC: Low
PR: None
UI: None
S: Unchanged
C: Low
I: High
A: High

Description

Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
NTPsec ntpsec 0 < 1.2.6

References & Advisories (2)

Bug Bounty Relevance

48 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

6.4 / 10.0 v3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

EPSS — Exploitation Probability

0.21%
Raw Score 0.002050
Percentile 10.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00205
2026-10-28
0.00205

Intelligence Sources

mitre ref →
nvd ref →

External Links