---
id: CVE-2024-5564
title: 'Libndp: buffer overflow in route information length field'
summary: >-
  A vulnerability was found in libndp. This flaw allows a local malicious user
  to cause a buffer overflow in NetworkManager, triggered by sending a malformed
  IPv6 router advertisement packet. This issue occurred as libndp was not
  correctly…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-120
vendor: Red Hat
product: libndp
affected:
  - libndp >= 1.0 < 1.7-7
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
  - libndp (all versions)
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2024-05-31T20:17:36.331326Z'
published: '2024-05-31'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T21:18:17.945Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-5564'
references:
  - url: 'https://access.redhat.com/errata/RHBA-2025:6631'
    label: 'RHBA-2025:6631'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4618'
    label: 'RHSA-2024:4618'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4619'
    label: 'RHSA-2024:4619'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4620'
    label: 'RHSA-2024:4620'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4622'
    label: 'RHSA-2024:4622'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4636'
    label: 'RHSA-2024:4636'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4640'
    label: 'RHSA-2024:4640'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4641'
    label: 'RHSA-2024:4641'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4642'
    label: 'RHSA-2024:4642'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4643'
    label: 'RHSA-2024:4643'
  - url: 'https://access.redhat.com/security/cve/CVE-2024-5564'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2284122'
    label: RHBZ#2284122
tags:
  - cve.org
epss: 0.01165
epssPercentile: 0.67405
ingestedAt: '2026-11-05T21:36:00.608Z'
---

## Overview

A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.

## Affected

- `libndp >= 1.0 < 1.7-7`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`
- `libndp (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Currently there is no mitigation available for this vulnerability.  Please make sure to update as the fixes become available.