CVE-2023-41910
- EPSS 0.12%
- Veröffentlicht 05.09.2023 07:15:14
- Zuletzt bearbeitet 21.11.2024 08:21:54
An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in dae...
CVE-2021-43612
- EPSS 0.12%
- Veröffentlicht 15.04.2023 22:15:07
- Zuletzt bearbeitet 06.02.2025 16:15:30
In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.
CVE-2020-27827
- EPSS 0.42%
- Veröffentlicht 18.03.2021 17:15:13
- Zuletzt bearbeitet 21.11.2024 05:21:53
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerabilit...
CVE-2015-8011
- EPSS 4.15%
- Veröffentlicht 28.01.2020 19:15:12
- Zuletzt bearbeitet 21.11.2024 02:37:50
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and ...
CVE-2015-8012
- EPSS 0.78%
- Veröffentlicht 28.01.2020 19:15:12
- Zuletzt bearbeitet 21.11.2024 02:37:50
lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet.