CVE-2015-8011

概要

参考情報

• openwall.com/lists/oss-security/2015/10/16/2 · Mailing List
• openwall.com/lists/oss-security/2015/10/30/2 · Mailing List
• cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf
• vincentbernat/lldpd commit dd4f16e · Patch
• lists.debian.org/debian-lts-announce/2021/02/msg00032.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJ4DXFJWMZ325ECZXPZOSK7BOEDJZHPR
• us-cert.cisa.gov/ics/advisories/icsa-21-194-07
• debian.org/security/2021/dsa-4836 · Third Party Advisory

lldpd のその他の脆弱性

• CVE-2026-46433中 6.5lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips 802.1Q VLAN tags fro…
• CVE-2023-41910緊急 9.8An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can rem…
• CVE-2021-43612高 7.5In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via sh…
• CVE-2020-27827高 7.5A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to han…
• CVE-2015-8012高 7.5lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet.