{"id":"CVE-2024-5564","aliases":["ALSA-2024:4620","ALSA-2024:4636","AZL-42609","AZL-42625","CLSA-2024-1724259497","CLSA-2025-1745270484","CLSA-2025-1755617684","CLSA-2026-1791301513","DEBIAN-CVE-2024-5564","DLA-3837-1","DSA-5713-1","EUVD-2024-47152","GHSA-rx7p-m6c3-777g","MGASA-2024-0225","OESA-2024-1723","RHBA-2025:6631","RHSA-2024:4618","RHSA-2024:4619","RHSA-2024:4620","RHSA-2024:4622","RHSA-2024:4636","RHSA-2024:4640","RHSA-2024:4641","RHSA-2024:4642","RHSA-2024:4643","RLSA-2024:4620","RLSA-2024:4636","SUSE-SU-2024:2283-1","SUSE-SU-2024:2541-1","SUSE-SU-2025:20088-1","UBUNTU-CVE-2024-5564","USN-6830-1","USN-7248-1","openSUSE-SU-2024:14112-1"],"status":"published","title":"Libndp: buffer overflow in route information length field","description":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01165,"percentile":0.67721,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2024-05-31T18:31:47Z","modified":"2026-11-04T21:18:17Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"libndp","fixed_in":["1.7-7.el8_10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libndp","fixed_in":["1.8-6.el9_4.alma.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libndp","fixed_in":["1.8-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libndp","fixed_in":["1.8-2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libndp","fixed_in":["1.2-9.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libndp-devel","fixed_in":["1.2-9.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libndp","fixed_in":["1.8-4.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libndp-devel","fixed_in":["1.8-4.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libndp","fixed_in":["1.2-9.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libndp-devel","fixed_in":["1.2-9.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libndp-dev","fixed_in":["1.6-1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libndp-tools","fixed_in":["1.6-1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libndp0","fixed_in":["1.6-1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libndp","fixed_in":["1.8-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libndp","fixed_in":["1.8-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libndp","fixed_in":["1.8-2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"libndp","fixed_in":["1.6-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"libndp","fixed_in":["1.6-1+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libndp","fixed_in":["1.8-2.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libndp","fixed_in":["1.7-4.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"libndp","fixed_in":["1.8-3.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"libndp","fixed_in":["1.8-3.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"libndp","fixed_in":["1.8-3.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"libndp","fixed_in":["0:1.9-2.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"libndp-debuginfo","fixed_in":["0:1.9-2.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"libndp-debugsource","fixed_in":["0:1.9-2.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libndp","fixed_in":["0:1.7-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libndp-debuginfo","fixed_in":["0:1.7-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libndp-debugsource","fixed_in":["0:1.7-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libndp","fixed_in":["0:1.7-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libndp-debuginfo","fixed_in":["0:1.7-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libndp-debugsource","fixed_in":["0:1.7-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libndp","fixed_in":["0:1.7-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libndp-debuginfo","fixed_in":["0:1.7-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libndp-debugsource","fixed_in":["0:1.7-6.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libndp","fixed_in":["0:1.8-5.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libndp-debuginfo","fixed_in":["0:1.8-5.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libndp-debugsource","fixed_in":["0:1.8-5.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libndp","fixed_in":["0:1.7-7.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libndp-debuginfo","fixed_in":["0:1.7-7.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libndp-debugsource","fixed_in":["0:1.7-7.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libndp","fixed_in":["0:1.2-10.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libndp-debuginfo","fixed_in":["0:1.2-10.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libndp-devel","fixed_in":["0:1.2-10.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libndp","fixed_in":["0:1.8-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libndp-debuginfo","fixed_in":["0:1.8-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libndp-debugsource","fixed_in":["0:1.8-6.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libndp","fixed_in":["0:1.7-4.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libndp-debuginfo","fixed_in":["0:1.7-4.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libndp-debugsource","fixed_in":["0:1.7-4.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libndp","fixed_in":["0:1.7-7.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libndp-debuginfo","fixed_in":["0:1.7-7.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libndp-debugsource","fixed_in":["0:1.7-7.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libndp","fixed_in":["0:1.8-5.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libndp-debuginfo","fixed_in":["0:1.8-5.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libndp-debugsource","fixed_in":["0:1.8-5.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libndp","fixed_in":["0:1.7-7.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libndp-debuginfo","fixed_in":["0:1.7-7.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libndp-debugsource","fixed_in":["0:1.7-7.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libndp","fixed_in":["0:1.7-7.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libndp-debuginfo","fixed_in":["0:1.7-7.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libndp-debugsource","fixed_in":["0:1.7-7.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libndp","fixed_in":["0:1.7-7.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libndp-debuginfo","fixed_in":["0:1.7-7.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libndp-debugsource","fixed_in":["0:1.7-7.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libndp","fixed_in":["0:1.7-7.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libndp","fixed_in":["0:1.8-6.el9_4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"libndp","fixed_in":["1.6-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libndp","fixed_in":["1.6-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libndp","fixed_in":["1.6-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"libndp","fixed_in":["1.8-3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libndp","fixed_in":["1.4-2ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libndp","fixed_in":["1.6-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libndp","fixed_in":["1.7-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libndp","fixed_in":["1.8-0ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libndp","fixed_in":["1.8-1fakesync1ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libndp","fixed_in":["1.8-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7-7.el8_10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-6.el9_4.alma.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-9.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libndp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-9.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-4.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libndp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-4.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-9.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libndp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-9.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libndp-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libndp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libndp0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-1+deb12u1"}]}],"versions":["1.8-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1+deb10u1"}]}],"versions":["1.6-1"]},{"source":"osv","ecosystem":"Debian:11","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1+deb11u1"}]}],"versions":["1.6-1"]},{"source":"osv","ecosystem":"Debian:12","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-1+deb12u1"}]}],"versions":["1.8-1"]},{"source":"osv","ecosystem":"Mageia:9","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-2.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7-4.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-3.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-3.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-3.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-6.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8-5.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8-5.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8-5.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-10.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-10.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libndp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-10.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8-6.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-4.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-4.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-4.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8-5.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8-5.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8-5.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libndp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libndp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-7.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8-6.el9_4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-2ubuntu0.16.04.1+esm1"}]}],"versions":["1.4-2","1.4-2ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1ubuntu0.1~esm1"}]}],"versions":["1.6-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7-0ubuntu1.1"}]}],"versions":["1.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-0ubuntu3.1"}]}],"versions":["1.8-0ubuntu2","1.8-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-1fakesync1ubuntu0.24.04.1"}]}],"versions":["1.8-1fakesync1","1.8-1fakesync1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7-0ubuntu1.1"}]}],"versions":["1.7-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-0ubuntu3.1"}]}],"versions":["1.8-0ubuntu2","1.8-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-1fakesync1ubuntu0.24.04.1"}]}],"versions":["1.8-1fakesync1","1.8-1fakesync1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-2ubuntu0.16.04.1+esm1"}]}],"versions":["1.4-2","1.4-2ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1ubuntu0.1~esm1"}]}],"versions":["1.6-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libndp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8-2.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"}],"references":[{"url":"https://access.redhat.com/errata/RHBA-2025:6631","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4618","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4619","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4620","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4622","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4636","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4640","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4641","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4642","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4643","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-5564","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","report","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2284122","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00011.html","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5564","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-rx7p-m6c3-777g"},{"url":"https://bugzilla.redhat.com/2284122","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-4620.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-4636.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1724259497.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1745270484.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1755617684.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1791301513.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-5564","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0225.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33304","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6830-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1723","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/10/html/10.0_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_6631.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-5564","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4618.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4619.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4620.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4622.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4636.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4640.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4641.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4642.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4643.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:4620","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:4636","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242283-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225771","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5564","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242541-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520088-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-5564","tags":["report"]},{"url":"https://lists.fedorahosted.org/archives/list/libndp@lists.fedorahosted.org/thread/ADDK2HO5LWNWPO43P4LA3IPUN3GW65PP/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7248-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-5564","title":"Libndp: buffer overflow in route information length field","description":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.","status":"published","published":"2024-05-31T18:31:47.333Z","modified":"2026-11-04T21:18:17.945Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-04T22:39:14.734949Z"}],"euvd":[{"id":"EUVD-2024-47152","description":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.","status":"published","published":"2024-05-31T18:31:47Z","modified":"2026-11-04T21:18:17Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-04T22:46:32.144626Z"}],"ghsa":[{"id":"GHSA-rx7p-m6c3-777g","title":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer...","description":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.","status":"published","published":"2024-05-31T21:30:52Z","modified":"2025-07-14T15:31:33Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:03:00.541352Z"}],"nvd":[{"id":"CVE-2024-5564","description":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.","status":"published","published":"2024-05-31T19:15:08.883Z","modified":"2026-11-04T22:17:23.19Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-04T23:43:36.946093Z"}],"osv":[{"id":"DEBIAN-CVE-2024-5564","description":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.","status":"published","published":"2024-05-31T19:15:08.883Z","modified":"2026-11-05T09:47:34.675805469Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"OESA-2024-1723","title":"libndp security update","description":"This package contains a library which provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.(CVE-2024-5564)","status":"published","published":"2024-06-14T11:07:11Z","modified":"2026-08-18T01:17:24.373633379Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHBA-2025:6631","title":"Red Hat Bug Fix Advisory: libndp bug fix and enhancement update","status":"published","published":"2025-07-15T10:06:44Z","modified":"2025-11-22T13:31:22Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2024:4618","title":"Red Hat Security Advisory: libndp security update","status":"published","published":"2024-09-16T20:34:21Z","modified":"2026-03-18T11:35:15.882155Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4619","title":"Red Hat Security Advisory: libndp security update","status":"published","published":"2024-09-16T20:34:29Z","modified":"2026-03-18T11:35:18.080472Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4620","title":"Red Hat Security Advisory: libndp security update","status":"published","published":"2024-09-16T20:34:40Z","modified":"2026-03-18T11:35:18.19454Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4622","title":"Red Hat Security Advisory: libndp security update","status":"published","published":"2024-09-16T20:34:48Z","modified":"2026-06-26T11:17:01Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4636","title":"Red Hat Security Advisory: libndp security update","status":"published","published":"2024-09-16T20:34:56Z","modified":"2026-03-18T11:35:17.583613Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4640","title":"Red Hat Security Advisory: libndp security update","status":"published","published":"2024-09-16T20:35:07Z","modified":"2026-03-18T11:35:18.612865Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4641","title":"Red Hat Security Advisory: libndp security update","status":"published","published":"2024-09-16T20:35:16Z","modified":"2026-03-18T11:35:18.129981Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4642","title":"Red Hat Security Advisory: libndp security update","status":"published","published":"2024-09-16T20:35:35Z","modified":"2026-03-18T11:36:18.300251Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4643","title":"Red Hat Security Advisory: libndp security update","status":"published","published":"2024-09-16T20:35:26Z","modified":"2026-03-18T11:35:18.514601Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RLSA-2024:4620","title":"Important: libndp security update","description":"Libndp is a library (used by NetworkManager) that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.\n\nSecurity Fix(es):\n\n* libndp: buffer overflow in route information length field (CVE-2024-5564)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.","status":"published","published":"2024-07-26T12:32:49.384788Z","modified":"2026-02-04T22:00:09.831261Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2024-5564","description":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.","status":"published","published":"2024-05-31T19:15:00Z","modified":"2026-04-22T15:21:42.082882Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:15.331356Z"},{"id":"ALSA-2024:4620","title":"Important: libndp security update","description":"Libndp is a library (used by NetworkManager) that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.\n\nSecurity Fix(es):\n\n* libndp: buffer overflow in route information length field (CVE-2024-5564)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.","status":"published","published":"2024-07-18T00:00:00Z","modified":"2026-10-29T11:02:21.45858558Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:4636","title":"Important: libndp security update","description":"Libndp is a library (used by NetworkManager) that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.\n\nSecurity Fix(es):\n\n* libndp: buffer overflow in route information length field (CVE-2024-5564)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-18T00:00:00Z","modified":"2026-10-29T11:31:46.594800068Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"AZL-42609","title":"CVE-2024-5564 affecting package libndp for versions less than 1.8-2","description":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.","status":"published","published":"2024-05-31T19:15:08Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.893001Z"},{"id":"AZL-42625","title":"CVE-2024-5564 affecting package libndp for versions less than 1.8-2","description":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.","status":"published","published":"2024-05-31T19:15:08Z","modified":"2026-04-21T04:30:40.915892Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"CLSA-2024-1724259497","title":"libndp: Fix of CVE-2024-5564","description":"- CVE-2024-5564: validate route information option length","status":"published","published":"2024-08-21T16:58:20Z","modified":"2026-06-01T00:33:05.098346165Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2025-1745270484","title":"libndp: Fix of CVE-2024-5564","description":"- CVE-2024-5564: validate route information option length","status":"published","published":"2025-04-21T21:21:29Z","modified":"2026-06-01T00:30:40.425425855Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1755617684","title":"libndp: Fix of CVE-2024-5564","description":"- CVE-2024-5564: validate route information option length","status":"published","published":"2025-08-19T15:34:47Z","modified":"2026-06-01T00:33:27.524989489Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2026-1791301513","title":"Fix CVE(s): CVE-2024-5564","description":"   * SECURITY UPDATE: buffer overflow via Route Information option length\n     - debian/patches/CVE-2024-5564.patch: validate the option length in\n       ndp_msg_opt_route_check_valid() (libndp/libndp.c)\n     - CVE-2024-5564","status":"published","published":"2026-10-06T15:45:23Z","modified":"2026-10-26T09:32:03.814376384Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CVE-2024-5564","description":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.","status":"published","published":"2024-05-31T19:15:08Z","modified":"2026-04-16T04:33:04.585090127Z","updated_at":"2026-11-02T15:44:44.777182Z"},{"id":"DLA-3837-1","title":"libndp - security update","status":"published","published":"2024-06-19T00:00:00Z","modified":"2026-03-09T01:19:04.472747Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5713-1","title":"libndp - security update","status":"published","published":"2024-06-16T00:00:00Z","modified":"2026-03-09T02:09:09.559203Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0225","title":"Updated libndp packages fix security vulnerabilities","description":"A vulnerability was found in libndp. This flaw allows a local malicious\nuser to cause a buffer overflow in NetworkManager, triggered by sending\na malformed IPv6 router advertisement packet. This issue occurred as\nlibndp was not correctly validating the route length information.\n","status":"published","published":"2024-06-17T17:44:07Z","modified":"2026-04-16T04:41:14.234979232Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14112-1","title":"libndp-1.8-2.1 on GA media","description":"These are all security issues fixed in the libndp-1.8-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-08T00:00:00Z","modified":"2026-02-04T04:21:35.408038Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2024:4636","title":"Important: libndp security update","description":"Libndp is a library (used by NetworkManager) that provides a wrapper for the IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.\n\nSecurity Fix(es):\n\n* libndp: buffer overflow in route information length field (CVE-2024-5564)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-26T12:33:54.254327Z","modified":"2026-02-05T06:00:06.942086Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2024:2283-1","title":"Security update for libndp","description":"This update for libndp fixes the following issues:\n\n- CVE-2024-5564: Add a check on the route information option length field. (bsc#1225771)\n","status":"published","published":"2024-07-02T21:12:46Z","modified":"2026-02-04T03:44:27.225811Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2541-1","title":"Security update for libndp","description":"This update for libndp fixes the following issues:\n\n- CVE-2024-5564: Fixed buffer overflow in route information length field (bsc#1225771)\n","status":"published","published":"2024-07-17T06:33:39Z","modified":"2026-02-04T04:28:21.402019Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2025:20088-1","title":"Security update for libndp","description":"This update for libndp fixes the following issues:\n\n- CVE-2024-5564: Fixed buffer overflow in route information length field (bsc#1225771).\n","status":"published","published":"2025-02-03T09:09:39Z","modified":"2026-03-23T04:48:09.569967Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-6830-1","title":"libndp vulnerability","description":"It was discovered that libndp incorrectly handled certain malformed IPv6\nrouter advertisement packets. A local attacker could use this issue to\ncause NetworkManager to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","status":"published","published":"2024-06-12T11:59:10Z","modified":"2026-04-22T10:47:47.550803Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-7248-1","title":"libndp vulnerability","description":"It was discovered that libndp incorrectly handled certain malformed IPv6\nrouter advertisement packets. A local attacker could possibly use this\nissue to cause NetworkManager to crash, resulting in a denial of service,\nor the execution of arbitrary code.\n","status":"published","published":"2025-02-03T14:21:32Z","modified":"2026-06-25T13:32:30.067903203Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}