CVE-2016-3698

libndp before 1.6, as used in NetworkManager, does not properly validate
the origin of Neighbor Discovery Protocol (NDP) messages, which allows
remote attackers to conduct man-in-the-middle attacks or cause a denial of
service (network connectivity disruption) by advertising a node as a router
from a non-local network.

Bugs

• <https://bugzilla.redhat.com/show_bug.cgi?id=1329366&gt;
• <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=824545&gt;