High
Security advisory
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2016-3698
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:09 UTC · Revision 1
Source evidence
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.
osv:CVE-2016-3698
Complete source record
{
"id": "9d8ebf6efa18e153225b7101e3990261a4d69007652d83f92cbd9e1143676552",
"url": "https://osv.dev/vulnerability/CVE-2016-3698",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2016-3698",
"summary": "libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.",
"evidence": "osv:CVE-2016-3698",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2016-3698",
"aliases": [
"CVE-2016-3698"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/jpirko/libndp",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "5c348445478b0b022a4276eff1d625224f2dd32c"
},
{
"fixed": "2af9a55b38b55abbf05fd116ec097d4029115839"
},
{
"fixed": "a4892df306e0532487f1634ba6d4c6d4bb381c7f"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:libndp:libndp:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "1.5"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "2af9a55b38b55abbf05fd116ec097d4029115839"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "a4892df306e0532487f1634ba6d4c6d4bb381c7f"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"v1.5",
"v1.4",
"v1.3",
"v1.2",
"v1.1",
"v1.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3698.json",
"vanir_signatures": [
{
"id": "CVE-2016-3698-459941ca",
"digest": {
"threshold": 0.9,
"line_hashes": [
"101531685102245183275852009936204835805",
"97214097350107449139354271253793144163",
"164556960884367075306208826080947227920",
"63667140911771292372519639404938362123",
"107609708243145846260850277971129018612",
"149671708942379045263423202375691929860",
"276736812418198674399398745332165992188",
"255153811896162706213876650589840007385",
"147620033244927339724801995357492862724",
"248492230984237394143240468981199335892",
"80532650512138466634566770911761801263",
"19379276848166018487743762528204049438",
"317732962020956697880670020394659768991",
"4713285105856074252637293696465359293",
"336392447973756466662138636616347655358",
"256441280703396429462980440770129052868",
"310670757024317316337915583468203254201",
"100533313525427938481399362732085311595",
"147006123485187320684094043079787332322",
"63532705780221147885641542842172196161",
"279088102222290451695944085394456378701",
"47225492609781377256839949416948704682",
"216455297242040471975488751603481145183",
"42708126467600362449193948110161610840",
"98864281191308664020340173720289236203",
"242382298386438782068416587705588555974",
"23852886056916299655593223487253425859",
"298088038683306022628626755404715910173",
"180079971066224120039924722704699715183",
"225678215534612598427683817518660938059",
"252274654423889629989601793849300079932",
"39873793423575350406519180824501182983",
"183596815582201256379123350069465895962"
]
},
"source": "https://github.com/jpirko/libndp/commit/a4892df306e0532487f1634ba6d4c6d4bb381c7f",
"target": {
"file": "libndp/libndp.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-3698-464868d7",
"digest": {
"length": 777,
"function_hash": "59048228406542646144257995526865974314"
},
"source": "https://github.com/jpirko/libndp/commit/a4892df306e0532487f1634ba6d4c6d4bb381c7f",
"target": {
"file": "libndp/libndp.c",
"function": "ndp_sock_open"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3698-4d71ff65",
"digest": {
"length": 1113,
"function_hash": "22335990842408782660678923636076935878"
},
"source": "https://github.com/jpirko/libndp/commit/a4892df306e0532487f1634ba6d4c6d4bb381c7f",
"target": {
"file": "libndp/libndp.c",
"function": "ndp_sock_recv"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2016-3698-e76bffc9",
"digest": {
"length": 961,
"function_hash": "284878020047458585157100332374317942815"
},
"source": "https://github.com/jpirko/libndp/commit/a4892df306e0532487f1634ba6d4c6d4bb381c7f",
"target": {
"file": "libndp/libndp.c",
"function": "myrecvfrom6"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:12:45Z"
}
}
],
"modified": "2026-10-20T13:12:45.906371871Z",
"provider": "osv",
"references": [
"https://rhn.redhat.com/errata/RHSA-2016-1086.html",
"https://github.com/jpirko/libndp/commit/2af9a55b38b55abbf05fd116ec097d4029115839",
"https://github.com/jpirko/libndp/commit/a4892df306e0532487f1634ba6d4c6d4bb381c7f"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "15.10"
},
{
"last_affected": "15.10"
},
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_desktop",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_hpc_node",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_hpc_node_eus",
"extracted_events": [
{
"range": [
{
"introduced": "7.2"
},
{
"last_affected": "7.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_aus",
"extracted_events": [
{
"range": [
{
"introduced": "7.2"
},
{
"last_affected": "7.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_eus",
"extracted_events": [
{
"range": [
{
"introduced": "7.2"
},
{
"last_affected": "7.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2016-3698",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387308,
"published_at": "2016-06-13T19:59:02.753+00:00"
}