Lldpd Project Lldpd 0.7.18

CPE Details

Lldpd Project Lldpd 0.7.18
lldpd_project
lldpd
0.7.18
2020-01-31
14h46 +00:00
2020-01-31
14h46 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:lldpd_project:lldpd:0.7.18:*:*:*:*:*:*:*

Informations

Vendor

lldpd_project

Product

lldpd

Version

0.7.18

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-41910 2023-09-04 22h00 +00:00 An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.
9.8
Critique
CVE-2021-43612 2023-04-15 00h00 +00:00 In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.
7.5
Haute
CVE-2020-27827 2021-03-17 23h00 +00:00 A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
7.5
Haute
CVE-2015-8011 2020-01-28 17h15 +00:00 Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
9.8
Critique
CVE-2015-8012 2020-01-28 17h15 +00:00 lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet.
7.5
Haute