Search vulnerabilities

Results 2

Export CSV
CVE-2014-3554

libndp: buffer overflow flaw in DNS Search List (DNSSL) handling

Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS Search List (DNSSL) in an IPv6 router advertisement.

CVSS 2.0 · 6.8 Medium EPSS 2.8% KEV · Not listed
Vendors
Products
CVE-2016-3698

libndp: denial of service due to insufficient validation of source of NDP messages

libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.

CVSS 3.0 · 8.1 High EPSS 3.8% KEV · Not listed
Vendors
Canonical Debian Libndp and 1 more
Products