CVE-2009-0418: HP HP-Ux

High severity, CVSS 9.3. EPSS: 8.2% chance of exploitation in the next 30 days.

The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity), read private network traffic, and possibly execute arbitrary code via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476.

Affected products

• HP HP-Ux: version b.11.11 only; version b.11.23 only; version b.11.31 only

Published 2009-02-04. Last modified 2026-06-16.