{"action":"Upgrade ntpd to 0.3.3 or later.","affected":[{"fixed":"0.3.3","introduced":"0.3.0"}],"component":"ntpd","cve_ids":["CVE-2023-33192"],"ecosystem":"crates.io","epss":0.00708,"exploited":false,"fixed_versions":["0.3.3"],"ghsa_id":"GHSA-qwhm-h7v3-mrjx","id":"tcs_01M5KF2STGKW0P64YCN45DW7HW","modified_at":"2026-09-10T03:50:08.269918785Z","published_at":"2023-05-25T17:01:12Z","references":["https://osv.dev/vulnerability/GHSA-qwhm-h7v3-mrjx","https://github.com/pendulum-project/ntpd-rs/security/advisories/GHSA-qwhm-h7v3-mrjx","https://nvd.nist.gov/vuln/detail/CVE-2023-33192","https://github.com/pendulum-project/ntpd-rs/pull/752","https://github.com/pendulum-project/ntpd-rs","https://github.com/pendulum-project/ntpd-rs/releases/tag/v0.3.3"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qwhm-h7v3-mrjx","url":"https://osv.dev/vulnerability/GHSA-qwhm-h7v3-mrjx"}],"summary":"Improper handling of NTS cookie length that could crash the ntpd-rs server"}