AlmaLinux 9.2 [TuxCare] Security Update: lldpd / lldpd-devel (ALMALINUX9.2:CLSA-2025:1758729003)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1758729003 advisory. - An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDPTLVADDRESSES TLVs, a malicious actor can...

CLSA-2025-1758729003 lldpd: Fix of CVE-2023-41910

CVE-2023-41910: fix out-of-bounds read on heap memory in cdpdecode...

CVE-2023-41910: Out-of-bounds Read

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDPTLVADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdpdecode in daemon/protocols/cdp.c...

CVE-2023-41910

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDPTLVADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdpdecode in daemon/protocols/cdp.c...

lldpd:FuzzDecode: Heap-buffer-overflow in cdp_decode

Project: https://github.com/lldpd/lldpd.git Detailed Report: https://oss-fuzz.com/testcase?key=5097776644227072 Project: lldpd Fuzzing Engine: libFuzzer Fuzz Target: FuzzDecode Job Type: libfuzzerasanlldpd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c00000077c...