Home

CVE-2016-3698

Description

libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.062

Associated Vulnerability

VulnerabilityOS Platform
Library for Neighbor Discovery Protocol (USN-2980-1) libndp0_1.4-2ubuntu0.15.10.1_i386.debLinux
Library for Neighbor Discovery Protocol (USN-2980-1) libndp0_1.4-2ubuntu0.15.10.1_amd64.debLinux
Library for Neighbor Discovery Protocol (USN-2980-1) libndp0_1.4-2ubuntu0.16.04.1_i386.debLinux
Library for Neighbor Discovery Protocol (USN-2980-1) libndp0_1.4-2ubuntu0.16.04.1_amd64.debLinux
(RHSA-2016:1086) Moderate: libndp security update libndp-1.2-6.el7_2.i686.rpmLinux
(RHSA-2016:1086) Moderate: libndp security update libndp-1.2-6.el7_2.x86_64.rpmLinux
(RHSA-2016:1086) Moderate: libndp security update libndp-devel-1.2-6.el7_2.i686.rpmLinux
(RHSA-2016:1086) Moderate: libndp security update libndp-devel-1.2-6.el7_2.x86_64.rpmLinux
(RHSA-2016:1086)Moderate: security update libndp-debuginfo-1.2-6.el7_2.i686.rpmLinux
(RHSA-2016:1086)Moderate: security update libndp-debuginfo-1.2-6.el7_2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234