Libndp is a specialized networking library for IPv6 Neighbor Discovery Protocol handling, deployed across Linux distributions and network management systems as a narrowly scoped but foundational component. Its observed vulnerabilities center on memory-safety and access-control issues characteristic of network protocol parsers, including classic buffer overflows and improper access control that arise from the library's low-level packet-handling role. Current severity, exploitation, and exposure figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Libndp over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-3698HIGH libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-t | Jun 13, 2016 | 8.1 | 27 | NO | NO |
CVE-2014-3554MEDIUM Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS | Jul 31, 2014 | 6.8 | 19 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Libndp.
Media articles that mention a CVE ID that affects a product developed by Libndp — matched by CVE ID, not by vendor name.