lldpd: denial of service

• CVE-2015-5714 (denial of service)

A buffer overflow has been discovered when handling management address
TLV. When a remote device was advertising a too large management address
while still respecting TLV boundaries, lldpd would crash due to a buffer
overflow.

• CVE-2015-5715 (denial of service)

A vulnerability has been discovered that is triggering an application
crash while using assert() if a malformed packet is handled.