What is CVE-2025-58066?

CVE-2025-58066 is a medium-severity vulnerability in Pendulum-project Ntpd-rs, classified under CWE-406. CVSS score: 5.3/10. Published 2025-08-29.

How severe is CVE-2025-58066?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Pendulum-project Ntpd-rs

CVE-2025-58066

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where a…

EPSS: 0.001 (28.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Pendulum-project Ntpd-rs — versions >= 1.2.0, < 1.6.2

Weakness classification (CWE)

CWE-406

References

https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-4855-q42w-5vr4 (x_refsource_CONFIRM)
https://github.com/pendulum-project/ntpd-rs/commit/da37cf167736cbd4d7804b1ed7ceb572468298e0 (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-58066?: CVE-2025-58066 is a medium-severity vulnerability in Pendulum-project Ntpd-rs, classified under CWE-406. CVSS score: 5.3/10. Published 2025-08-29.
How severe is CVE-2025-58066?: Medium severity. CVSS v3 base score is 5.3 out of 10.