AZL-42609

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42609.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-42609

Upstream

CVE-2024-5564

Published

2024-05-31T19:15:08Z

Modified

2026-04-21T04:30:39.994743Z

Summary

CVE-2024-5564 affecting package libndp for versions less than 1.8-2

Details

A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-5564

Affected packages

Azure Linux:3 / libndp

Package

Name: libndp
Purl: pkg:rpm/azure-linux/libndp

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8-2

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42609.json"