nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP servers running ntpd-rs. Client-only configurations are not affected. Affected users are recommended to upgrade to version 1.6.2 as soon as possible.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7fbf258406 advisory.

    Update to version 1.6.2.

    Includes fixes for CVE-2025-58066 (potential DoS in the ntpd-rs server) and CVE-2025-58160 (potential     tracing log pollution).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ee9b86c6d9 advisory.

    Update to version 1.6.2.

    Includes fixes for CVE-2025-58066 (potential DoS in the ntpd-rs server) and CVE-2025-58160 (potential     tracing log pollution).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cf3fbd8fcf advisory.

    Update to version 1.6.2.

    Includes fixes for CVE-2025-58066 (potential DoS in the ntpd-rs server) and CVE-2025-58160 (potential     tracing log pollution).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In     versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of     service vulnerability, where an attacker can induce a message storm between two NTP servers running ntpd-     rs. Client-only configurations are not affected. Affected users are recommended to upgrade to version     1.6.2 as soon as possible. (CVE-2025-58066)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
266367	Fedora 42 : ntpd-rs (2025-7fbf258406)	Nessus	Fedora Local Security Checks	low
266365	Fedora 41 : ntpd-rs (2025-ee9b86c6d9)	Nessus	Fedora Local Security Checks	low
266315	Fedora 43 : ntpd-rs (2025-cf3fbd8fcf)	Nessus	Fedora Local Security Checks	low
260947	Linux Distros Unpatched Vulnerability : CVE-2025-58066	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-58066

medium

Tenable Plugins

low

low

low

medium