Logo
vulnerabilityCVE-2024-5564
Name
CVE-2024-5564
Source
NVD ( link)Debian ( link)
Description
A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
libndp
Patched

Vulnerability Ratings#


8.1
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.9
Not Affected
buildroot
master
1.9
Not Affected
openwrt
master
1.8-r1
Not Affected
openwrt
openwrt-25.12
1.8-r1
Not Affected
yocto
master
1.9
Not Affected
yocto
scarthgap
1.8
Patched

Resolved with patches#


libndp (yocto:kirkstone)

#
Title
Author
Resolve
1
libndp: valid route information option length
Hangbin Liu <liuhangbin@gmail.com>
CVE-2024-5564

libndp (yocto:scarthgap)

#
Title
Author
Resolve
1
libndp: valid route information option length
Hangbin Liu <liuhangbin@gmail.com>
CVE-2024-5564