Test ID:	1.3.6.1.4.1.25623.1.0.842756
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2980-1)
Summary:	The remote host is missing an update for the 'libndp' package(s) announced via the USN-2980-1 advisory.
Description:	Summary: The remote host is missing an update for the 'libndp' package(s) announced via the USN-2980-1 advisory. Vulnerability Insight: Julien Bernard discovered that libndp incorrectly performed origin checks when receiving Neighbor Discovery Protocol (NDP) messages. A remote attacker outside of the local network could use this issue to advertise a node as a router, causing a denial of service, or possibly to act as a machine-in-the-middle. Affected Software/OS: 'libndp' package(s) on Ubuntu 15.10, Ubuntu 16.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3698 DSA-3581 http://www.debian.org/security/2016/dsa-3581 RHSA-2016:1086 https://rhn.redhat.com/errata/RHSA-2016-1086.html USN-2980-1 http://www.ubuntu.com/usn/USN-2980-1 [oss-security] 20160517 RHSA-2016:1086 libndp: denial of service due to insufficient validation of source of NDP messages http://www.openwall.com/lists/oss-security/2016/05/17/9 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html https://github.com/jpirko/libndp/commit/2af9a55b38b55abbf05fd116ec097d4029115839 https://github.com/jpirko/libndp/commit/a4892df306e0532487f1634ba6d4c6d4bb381c7f
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.