[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2016-1086 -- Oracle libndp

ID: oval:org.secpod.oval:def:1501471Date: (C)2016-05-24   (M)2023-12-20
Class: PATCHFamily: unix




It was found that libndp did not properly validate and check the origin of Neighbor Discovery Protocol (NDP) messages. An attacker on a non-local network could use this flaw to advertise a node as a router, allowing them to perform man-in-the-middle attacks on a connecting client, or disrupt the network connectivity of that client.

Platform:
Oracle Linux 7
Product:
libndp
Reference:
ELSA-2016-1086
CVE-2016-3698
CVE    1
CVE-2016-3698
CPE    2
cpe:/a:libndp:libndp
cpe:/o:oracle:linux:7

© SecPod Technologies