CVE-2016-3698 Security feature bypass in n/a

High 8.1 Published 13 Jun 2016 Updated 6 Aug 2024

Remote attackers can bypass network restrictions to perform man-in-the-middle attacks or cause denial of service by spoofing router advertisements.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-3698?

CVE-2016-3698 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 13 Jun 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.

Weakness: CWE-284

Which versions are affected by CVE-2016-3698?

It affects 10 products.

Linux distribution packages (13)

`libndp` Red Hat:enterprise_linux:7::client	All versions	`0:1.2-6.el7_2`
`libndp-debuginfo` Red Hat:enterprise_linux:7::client	All versions	`0:1.2-6.el7_2`
`libndp-devel` Red Hat:enterprise_linux:7::client	All versions	`0:1.2-6.el7_2`
`libndp` Red Hat:enterprise_linux:7::computenode	All versions	`0:1.2-6.el7_2`
`libndp-debuginfo` Red Hat:enterprise_linux:7::computenode	All versions	`0:1.2-6.el7_2`
`libndp-devel` Red Hat:enterprise_linux:7::computenode	All versions	`0:1.2-6.el7_2`
`libndp` Red Hat:enterprise_linux:7::server	All versions	`0:1.2-6.el7_2`
`libndp-debuginfo` Red Hat:enterprise_linux:7::server	All versions	`0:1.2-6.el7_2`
`libndp-devel` Red Hat:enterprise_linux:7::server	All versions	`0:1.2-6.el7_2`
`libndp` Red Hat:enterprise_linux:7::workstation	All versions	`0:1.2-6.el7_2`
`libndp-debuginfo` Red Hat:enterprise_linux:7::workstation	All versions	`0:1.2-6.el7_2`
`libndp-devel` Red Hat:enterprise_linux:7::workstation	All versions	`0:1.2-6.el7_2`
`libndp` openSUSE:Tumbleweed	All versions	`1.6-2.3`

Products include Canonical Ubuntu Linux, Debian Debian Linux, Libndp Libndp, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Hpc Node, Redhat Enterprise Linux Hpc Node Eus and 4 more.

How do I fix CVE-2016-3698?

Upgrade to a fixed version.

Is CVE-2016-3698 being exploited?

There is no known exploitation of CVE-2016-3698 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2016-3698, DSA-3581-1, GHSA-rj7j-9h37-7pw7, MGASA-2016-0185, RHSA-2016:1086, UBUNTU-CVE-2016-3698 and 2 more.