Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A buffer overflow vulnerability (CVE-2024-5564) exists in libndp, a library used by NetworkManager for IPv6 Neighbor Discovery Protocol. The flaw is in the route information length field, which could lead to memory corruption. Red Hat has issued a security update for libndp in Red Hat Enterprise Linux 7 Extended Lifecycle Support to address this issue. The vulnerability is rated as having an important security impact by Red Hat. No known exploits in the wild have been reported.

The libndp library, which provides a wrapper for the IPv6 Neighbor Discovery Protocol and includes the ndptool utility, contains a buffer overflow vulnerability in the route information length field (CVE-2024-5564). This vulnerability could potentially allow an attacker to cause memory corruption by sending specially crafted NDP messages. Red Hat has released a security update for libndp in Red Hat Enterprise Linux 7 Extended Lifecycle Support to fix this issue. The advisory classifies the security impact as important. No CVSS score is provided in the advisory, and no exploits are currently known in the wild.

Detailed information about Red Hat Security Advisory: libndp security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical detail

Red Hat Security Advisory: libndp security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:4622

https://access.redhat.com/security/updates/classification/#important

2284122

Canonical URL

Red Hat Security Advisory: libndp security update

A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information.

CVE-2024-5564 is a classic buffer overflow vulnerability discovered in libndp, a library used by NetworkManager for processing IPv6 Neighbor Discovery Protocol (NDP) messages. The flaw occurs because libndp fails to properly validate the route length field in IPv6 router advertisement packets. An attacker can craft a malformed IPv6 router advertisement packet with incorrect route length information, causing libndp to copy data into a buffer without checking the input size, leading to a buffer overflow. This vulnerability affects NetworkManager version 1.0, which relies on libndp for handling IPv6 NDP messages. The vulnerability is exploitable remotely over the network without requiring authentication or user interaction, though it has a high attack complexity due to the need to send specifically crafted IPv6 packets. The CVSS v3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability. Successful exploitation could allow an attacker to execute arbitrary code, cause denial of service, or escalate privileges on affected systems. No public exploits or active exploitation have been reported yet. The vulnerability is particularly concerning for environments that use IPv6 extensively and rely on NetworkManager for network configuration and management. Since NetworkManager is widely deployed in many Linux distributions, this vulnerability has broad potential impact. However, the affected version is specifically 1.0, so systems running newer or patched versions may not be vulnerable. The issue highlights the importance of robust input validation in network protocol implementations to prevent memory corruption vulnerabilities.

Detailed information about CVE-2024-5564: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'). Get real-time updates, technical details, and 

CVE-2024-5564: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-5564: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')


Red Hat Security Advisory: libndp security updateCVE-2024-5564 0 A buffer overflow vulnerability (CVE-2024-5564) exists in libndp, a library used by NetworkManager for IPv6 Neighbor Discovery Protocol. The flaw is in the route information length field, which could lead to memory corruption. Red Hat has issued a security update for libndp in Red Hat Enterprise Linux 7 Extended Lifecycle Support to address this issue. The vulnerability is rated as having an important security impact by Red Hat. No known exploits in the wild have been reported. HighVulnerability#gcve #csaf #cve-2024-5564 Join the discussion	GCVE Database	07/18/2024, 13:41:04 UTC Added: 06/25/2026, 21:47:30 UTC
CVE-2024-5564: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CVE-2024-5564 0 A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as libndp was not correctly validating the route length information. HighVulnerabilityUnited StatesGermanyUnited Kingdom+10#cve #cve-2024-5564 Join the discussion	CVE Database V5	05/31/2024, 18:31:47 UTC Added: 05/28/2025, 23:29:31 UTC

Threats Tagged 'cve-2024-5564'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-5564'

Lead Pen Test Professional