Lucene search

RedosROS-20240904-04

HistorySep 04, 2024 - 12:00 a.m.

ROS-20240904-04

2024-09-0400:00:00

redos.red-soft.ru

vulnerability

libndp

confidentiality

integrity

availability

ipv6

packets

exploitation

unix

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

Low

EPSS

Percentile

13.8%

JSON

A vulnerability in the libndp library is related to an operation exceeding buffer boundaries in memory. Exploitation
The vulnerability could allow an attacker to affect the confidentiality, integrity, and availability of protected information by sending specially crafted IPv6 packets.
availability of protected information by sending specially crafted IPv6 packets

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64libndp< 1.7-12UNKNOWN

OS	Version	Architecture	Package	Version	Filename
redos	7.3	x86_64	libndp	< 1.7-12	UNKNOWN

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

Low

EPSS

Percentile

13.8%

JSON

Related for ROS-20240904-04