{"id":"CVE-2024-5564","title":"Libndp: buffer overflow in route information length field","summary":"A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-120"],"vendor":"Red Hat","product":"libndp","affected":["libndp >= 1.0 < 1.7-7","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)","libndp (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2024-05-31T20:17:36.331326Z"},"published":"2024-05-31","updated":"2026-11-04","sourceUpdated":"2026-11-04T21:18:17.945Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-5564","references":[{"url":"https://access.redhat.com/errata/RHBA-2025:6631","label":"RHBA-2025:6631"},{"url":"https://access.redhat.com/errata/RHSA-2024:4618","label":"RHSA-2024:4618"},{"url":"https://access.redhat.com/errata/RHSA-2024:4619","label":"RHSA-2024:4619"},{"url":"https://access.redhat.com/errata/RHSA-2024:4620","label":"RHSA-2024:4620"},{"url":"https://access.redhat.com/errata/RHSA-2024:4622","label":"RHSA-2024:4622"},{"url":"https://access.redhat.com/errata/RHSA-2024:4636","label":"RHSA-2024:4636"},{"url":"https://access.redhat.com/errata/RHSA-2024:4640","label":"RHSA-2024:4640"},{"url":"https://access.redhat.com/errata/RHSA-2024:4641","label":"RHSA-2024:4641"},{"url":"https://access.redhat.com/errata/RHSA-2024:4642","label":"RHSA-2024:4642"},{"url":"https://access.redhat.com/errata/RHSA-2024:4643","label":"RHSA-2024:4643"},{"url":"https://access.redhat.com/security/cve/CVE-2024-5564"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2284122","label":"RHBZ#2284122"}],"tags":["cve.org"],"epss":0.01165,"epssPercentile":0.67405,"ingestedAt":"2026-11-05T21:36:00.608Z","slug":"CVE-2024-5564","body":"## Overview\n\nA vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.\n\n## Affected\n\n- `libndp >= 1.0 < 1.7-7`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n- `libndp (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nCurrently there is no mitigation available for this vulnerability.  Please make sure to update as the fixes become available.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}