CVE-2016-3698

CVE-2016-3698 affects libndp prior to 1.6 used by NetworkManager; vulnerable code path validates the origin of Neighbor Discovery Protocol messages and can enable an attacker on a non‑local network to advertise a node as a router, enabling MITM or disrupting connectivity. Multiple vendors/distros...

CVE-2016-3698: Improper Access Control

libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol NDP messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service network connectivity disruption by advertising a node as a router from a...

Fedora Update for libndp FEDORA-2016-5cbcaebaf2

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libndp FEDORA-2016-2be4263b24

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libndp FEDORA-2016-189e43cb4f

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for libndp RHSA-2016:1086-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libndp: man-in-the-middle

Libndp before version 1.6 does properly validate and check the origin of Neighbor Discovery Protocol NDP messages. An attacker on a non-local network can exploit this flaw to advertise a node as a router, which allows them to re-route the traffic through an attacker-controlled node...

Scientific Linux Security Update : libndp on SL7.x x86_64 (20160517)

Security Fixes : - It was found that libndp did not properly validate and check the origin of Neighbor Discovery Protocol NDP messages. An attacker on a non-local network could use this flaw to advertise a node as a router, allowing them to perform man-in-the-middle attacks on a connecting client...

[SECURITY] Fedora 23 Update: libndp-1.6-1.fc23

This package contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages...

[SECURITY] Fedora 22 Update: libndp-1.4-2.fc22.1

This package contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages...

[SECURITY] Fedora 24 Update: libndp-1.6-1.fc24

This package contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages...

libndp Denial of Service Vulnerability

libndp is a Neighbor Discovery Protocol library that contains libraries for IPv6 Neighbor Discovery Protocol wrappers and ndptool for sending and receiving NDP Neighbor Discovery Protocol messages. A security vulnerability exists in libndp that stems from the program's failure to properly perform...

MGASA-2016-0185 Updated libndp packages fix CVE-2016-3698

Updated libndp package fixes security vulnerability: Libndp is a library used by NetworkManager that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages. Security Fixes: It was found that libndp did not properly...

Updated libndp packages fix CVE-2016-3698

Updated libndp package fixes security vulnerability: Libndp is a library used by NetworkManager that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages. Security Fixes: It was found that libndp did not properly...

CentOS Update for libndp CESA-2016:1086 centos7

Check the version of libndp SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882494";...

Ubuntu 16.04 LTS : libndp vulnerability (USN-2980-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2980-1 advisory. Julien Bernard discovered that libndp incorrectly performed origin checks when receiving Neighbor Discovery Protocol NDP messages. A remote attacker outside of th...

Oracle Linux 7 : libndp (ELSA-2016-1086)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1086 advisory. - libndp: fix hop limit validation CVE-2016-3698 - libndp: validate the IPv6 hop limit CVE-2016-3698 Tenable has extracted the preceding description block...

RHEL 7 : libndp (RHSA-2016:1086)

An update for libndp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Debian DSA-3581-1 : libndp - security update

Julien Bernard discovered that libndp, a library for the IPv6 Neighbor Discovery Protocol, does not properly perform input and origin checks during the reception of a NDP message. An attacker in a non-local network could use this flaw to advertise a node as a router, and cause a denial of service...

CentOS 7 : libndp (CESA-2016:1086)

An update for libndp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...