Skip to content
OpenAdvisories
Medium ELSA-2016-1086 1 CVE

Moderate: libndp security update (Oracle Linux 7)

Published May 17, 2016 · Updated May 17, 2016

Summary

[1.2-6]
- libndp: fix hop limit validation [CVE-2016-3698]

[1.2-5]
- libndp: validate the IPv6 hop limit [CVE-2016-3698]
- libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 libndp 0:1.2-6.el7_2
Oracle Linux · 7 libndp-devel 0:1.2-6.el7_2

Vulnerabilities 1

  • Unscored —

    libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP…