AlmaLinux 9.2 [TuxCare] Security Update: lldpd / lldpd-devel (ALMALINUX9.2:CLSA-2025:1758729003)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1758729003 advisory. - An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDPTLVADDRESSES TLVs, a malicious actor can...

CLSA-2025-1758729003 lldpd: Fix of CVE-2023-41910

CVE-2023-41910: fix out-of-bounds read on heap memory in cdpdecode...

CVE-2023-41910: Out-of-bounds Read

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDPTLVADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdpdecode in daemon/protocols/cdp.c...