3 matches found
CVE-2016-3698
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol NDP messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service network connectivity disruption by advertising a node as a router from a...
8.1CVSS7.9AI score0.03806EPSS
SaveExploits0
libndp: denial of service due to insufficient validation of source of NDP messages
It was found that libndp did not properly validate and check the origin of Neighbor Discovery Protocol NDP messages. An attacker on a non-local network could use this flaw to advertise a node as a router, allowing them to perform man-in-the-middle attacks on a connecting client, or disrupt the...
8.1CVSS5.8AI score0.03806EPSS
SaveExploits0References4
20