CVE-2016-3698
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor...
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
- Record
CVE-2016-3698- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-284
- Updated
- 2026-11-02
CVE List No score
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
- Record
CVE-2016-3698- Updated
- 2026-11-02
EUVDEUVD-2016-4719 No score
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
- Record
EUVD-2016-4719- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rj7j-9h37-7pw7
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor...
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
- Record
GHSA-rj7j-9h37-7pw7- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
OSV
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
- Record
CVE-2016-3698- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-3698
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
- Record
DEBIAN-CVE-2016-3698- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2016-3698
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
- Record
UBUNTU-CVE-2016-3698- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2016-0185 No score
Updated libndp packages fix CVE-2016-3698
Updated libndp package fixes security vulnerability:
Libndp is a library (used by NetworkManager) that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.
Security Fix(es):
It was found that libndp did not properly validate and check the origin of Neighbor Discovery Protocol (NDP) messages. An attacker on a non-local network could use this flaw to advertise a node as a router, allowing them to perform man-in-the-middle attacks on a connecting client, or disrupt the network connectivity of that client. (CVE-2016-3698)
- Record
MGASA-2016-0185- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10042-1 No score
libndp-1.6-2.3 on GA media
These are all security issues fixed in the libndp-1.6-2.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10042-1- Updated
- 2026-11-02
OSVUSN-2980-1 No score
libndp vulnerability
Julien Bernard discovered that libndp incorrectly performed origin checks when receiving Neighbor Discovery Protocol (NDP) messages. A remote attacker outside of the local network could use this issue to advertise a node as a router, causing a denial of service, or possibly to act as a machine-in-the-middle.
- Record
USN-2980-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libndpDebian:12 |
before 1.6-1 | 1.6-1 |
libndpDebian:13 |
before 1.6-1 | 1.6-1 |
libndpDebian:14 |
before 1.6-1 | 1.6-1 |
libndpDebian:8 |
before 1.4-2+deb8u1, plus listed versions 1.4-2 |
1.4-2+deb8u1 |
libndpMageia:5 |
before 1.4-3.1.mga5 | 1.4-3.1.mga5 |
libndpRed Hat:enterprise_linux:7::client |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndp-debuginfoRed Hat:enterprise_linux:7::client |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndp-develRed Hat:enterprise_linux:7::client |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndpRed Hat:enterprise_linux:7::computenode |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndp-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libndp-develRed Hat:enterprise_linux:7::computenode |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndpRed Hat:enterprise_linux:7::server |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndp-debuginfoRed Hat:enterprise_linux:7::server |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndp-develRed Hat:enterprise_linux:7::server |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndpRed Hat:enterprise_linux:7::workstation |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndp-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndp-develRed Hat:enterprise_linux:7::workstation |
before 0:1.2-6.el7_2 | 0:1.2-6.el7_2 |
libndpUbuntu:16.04:LTS |
before 1.4-2ubuntu0.16.04.1, plus listed versions 1.4-2 |
1.4-2ubuntu0.16.04.1 |
libndpopenSUSE:Tumbleweed |
before 1.6-2.3 | 1.6-2.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-3698 is a high vulnerability (CVSS 8.1) in Libndp, published May 17, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.81%, the 90th percentile. Fixed in libndp 1.6-1.
References
github.com/jpirko/libndp/commit/a4892df306e0532487f1634ba6d4c6d4bb381c7f
debian.org/security/2016/dsa-3581
oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
openwall.com/lists/oss-security/2016/05/17/9
ubuntu.com/usn/USN-2980-1
Show 15 moreShow less
rhn.redhat.com/errata/RHSA-2016-1086.html
nvd.nist.gov/vuln/detail/CVE-2016-3698
access.redhat.com/errata/RHSA-2016:1086
bugzilla.redhat.com/show_bug.cgi?id=1329366
security-tracker.debian.org/tracker/CVE-2016-3698
advisories.mageia.org/MGASA-2016-0185.html
bugs.mageia.org/show_bug.cgi?id=18477
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1086.json
cve.org/CVERecord?id=CVE-2016-3698
ubuntu.com/security/CVE-2016-3698
suse.com/security/cve/CVE-2016-3698