CVE-2023-41910

概要

参考情報

• lldpd/lldpd commit a9aeabd · Patch
• lldpd/lldpd release 1.0.17 · Release Notes
• lists.debian.org/debian-lts-announce/2023/09/msg00025.html
• debian.org/security/2023/dsa-5505

lldpd のその他の脆弱性

• CVE-2026-46433中 6.5lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips 802.1Q VLAN tags fro…
• CVE-2021-43612高 7.5In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via sh…
• CVE-2020-27827高 7.5A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to han…
• CVE-2015-8012高 7.5lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet.
• CVE-2015-8011緊急 9.8Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of se…