Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Azure libndp before 1.8‑2 can crash NetworkManager
published 2 years ago
Summary
The libndp library used in Azure systems up to version 1.8‑2 does not properly check data in IPv6 router advertisement packets. A user with local access could send a specially crafted packet that overflows a buffer, causing NetworkManager to stop working. Update libndp to a newer version or apply the vendor’s patch to prevent this issue.
What to do
- Update azure libndp to version 1.8-2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | libndp |
< 1.8-2 Fix: upgrade to 1.8-2
|
Original advisory text
CVE-2024-5564 affecting package libndp for versions less than 1.8-2
A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.
References
Timeline
Published31 May 2024
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-42609 · OSV
Track software like this
Free during beta