CVE-2016-3698: libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery P...

Security readout for executives and security teams

This flaw affects libndp before 1.6, used by NetworkManager. It can let an attacker abuse IPv6 Neighbor Discovery messages to disrupt connectivity or enable man-in-the-middle positioning. The bundle does not show known active exploitation or a CVSS score, so urgency depends on vulnerable Linux exposure. Likely exposure is Linux systems using vulnerable libndp, especially where NetworkManager processes IPv6 Neighbor Discovery traffic. The bundle does not provide a complete product matrix, CPE list, or configuration-specific reachability details. Treat this as a moderate infrastructure hygiene issue. It can affect availability and traffic trust, but the supplied evidence does not show mass exploitation or a critical severity rating. Patch through normal Linux security update processes, prioritizing shared or untrusted network segments. Mitigation focus: Upgrade libndp to version 1.6 or a vendor-fixed package.; Apply relevant Debian, Ubuntu, Red Hat, or Oracle Linux security updates.; Review vendor advisories before changing NetworkManager or IPv6 behavior..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.