CVE-2016-3698: High severity red hat enterprise linux desktop vulnerability
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3698?
CVE-2016-3698 is classified as important due to its potential to allow man-in-the-middle attacks and network connectivity disruption.
How do I fix CVE-2016-3698?
To mitigate CVE-2016-3698, update libndp to version 1.6 or later which correctly validates Neighbor Discovery Protocol messages.
What are the affected software versions for CVE-2016-3698?
CVE-2016-3698 affects libndp versions up to 1.5 and multiple Red Hat Enterprise Linux and Ubuntu versions.
What types of attacks can CVE-2016-3698 lead to?
CVE-2016-3698 can lead to man-in-the-middle attacks and denial of service by improperly handled Neighbor Discovery Protocol messages.
Who is at risk for CVE-2016-3698 vulnerabilities?
Users of affected systems, particularly those using outdated versions of libndp on Red Hat or Ubuntu distributions, are at risk for CVE-2016-3698.