Affected: AlmaLinux:8: libndp

Libndp is a library (used by NetworkManager) that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.

Security Fix(es):

* libndp: buffer overflow in route information length field (CVE-2024-5564)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

enhancement update: CVE-2024-5564 for libndp

A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.

A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.

Affected: openEuler:20.03-LTS-SP4: libndp, openEuler:22.03-LTS-SP1: libndp, openEuler:22.03-LTS-SP3: libndp, openEuler:24.03-LTS: libndp

This package contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages. Security Fix(es): A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.(CVE-2024-5564)

libndp: buffer overflow in route information length field

Security update for libndp

Affected: Ubuntu:Pro:16.04:LTS: libndp, Ubuntu:Pro:18.04:LTS: libndp, Ubuntu:20.04:LTS: libndp, Ubuntu:22.04:LTS: libndp, Ubuntu:24.04:LTS: libndp

A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in libndp und SUSE Linux ausnutzen, um beliebigen Programmcode auszuführen.