Lucene search
UbuntuUSN-6830-1HistoryJun 12, 2024 - 12:00 a.m.
libndp vulnerability
2024-06-1200:00:00
ubuntu.com
11
ubuntu 24.04 lts
ubuntu 23.10
ubuntu 22.04 lts
ubuntu 20.04 lts
libndp
neighbor discovery protocol
ipv6
networkmanager
denial of service
arbitrary code
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
Low
EPSS
0
Percentile
13.8%
Releases
- Ubuntu 24.04 LTS
- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- libndp - Library for Neighbor Discovery Protocol
Details
It was discovered that libndp incorrectly handled certain malformed IPv6
router advertisement packets. A local attacker could use this issue to
cause NetworkManager to crash, resulting in a denial of service, or
possibly execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 24.04 | noarch | libndp0 | < 1.8-1fakesync1ubuntu0.24.04.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libndp-dev | < 1.8-1fakesync1ubuntu0.24.04.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libndp-tools | < 1.8-1fakesync1ubuntu0.24.04.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libndp-tools-dbgsym | < 1.8-1fakesync1ubuntu0.24.04.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libndp0-dbgsym | < 1.8-1fakesync1ubuntu0.24.04.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libndp0 | < 1.8-1fakesync1ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libndp-dev | < 1.8-1fakesync1ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libndp-tools | < 1.8-1fakesync1ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libndp-tools-dbgsym | < 1.8-1fakesync1ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | libndp0-dbgsym | < 1.8-1fakesync1ubuntu0.23.10.1 | UNKNOWN |
References
Related
nessus
nessus
RHEL 7 : libndp (RHSA-2024:4622)
2024-07-18 00:00:00
SUSE SLES12 Security Update : libndp (SUSE-SU-2024:2541-1)
2024-07-22 00:00:00
Oracle Linux 8 : libndp (ELSA-2024-4620)
2024-07-25 00:00:00
openvas
openvas
openSUSE: Security Advisory for libndp (SUSE-SU-2024:2283-1)
2024-07-10 00:00:00
Huawei EulerOS: Security Advisory for libndp (EulerOS-SA-2024-2103)
2024-08-09 00:00:00
Huawei EulerOS: Security Advisory for libndp (EulerOS-SA-2024-2372)
2024-09-12 00:00:00
cvelist
cvelist
CVE-2024-5564 Libndp: buffer overflow in route information length field
2024-05-31 18:31:47
mageia
mageia
Updated libndp packages fix security vulnerabilities
2024-06-17 20:44:07
osv
osv
Important: libndp security update
2024-07-18 00:00:00
Security update for libndp
2024-07-02 21:12:46
Security update for libndp
2024-07-17 06:33:39
redhat
redhat
(RHSA-2024:4636) Important: libndp security update
2024-07-18 15:17:03
(RHSA-2024:4618) Important: libndp security update
2024-07-18 12:54:24
(RHSA-2024:4622) Important: libndp security update
2024-07-18 12:55:05
oraclelinux
oraclelinux
libndp security update
2024-07-18 00:00:00
libndp security update
2024-09-04 00:00:00
libndp security update
2024-07-18 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-5564 affecting package libndp for versions less than 1.8-2
2024-06-19 17:02:35
CVE-2024-5564 affecting package libndp for versions less than 1.8-2
2024-07-02 23:30:04
vulnrichment
vulnrichment
CVE-2024-5564 Libndp: buffer overflow in route information length field
2024-05-31 18:31:47
rocky
rocky
libndp security update
2024-07-26 12:33:54
libndp security update
2024-07-26 12:32:49
almalinux
almalinux
Important: libndp security update
2024-07-18 00:00:00
Important: libndp security update
2024-07-18 00:00:00
nvd
nvd
CVE-2024-5564
2024-05-31 19:15:08
amazon
amazon
Important: libndp
2024-06-19 19:15:00
debiancve
debiancve
CVE-2024-5564
2024-05-31 19:15:08
redos
redos
ROS-20240904-04
2024-09-04 00:00:00
redhatcve
redhatcve
CVE-2024-5564
2024-05-31 14:04:11
cve
cve
CVE-2024-5564
2024-05-31 19:15:08
ubuntucve
ubuntucve
CVE-2024-5564
2024-05-31 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0768
2024-06-21 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0300
2024-06-21 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0636
2024-06-21 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-08-22 09:25:46
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
Low
EPSS
0
Percentile
13.8%
Related for USN-6830-1