539 matches found
Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow (CVE-2019-1901)
A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...
CVE-2023-36849
An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed LLDP packet is received, l2cpd will...
CVE-2023-31129
The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router solicitiations. Contiki-NG contains an implementation of IPv6 Neighbor Discovery ND in the module os/net/ipv6/uip-nd6.c. The ND protocol includes a...
Contiki-NG 代码问题漏洞
Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A code issue vulnerability exists in Contiki-NG 4.8 and earlier versions that stems from the message handler not checking RS messages with SLLAO, which indicates a link layer address...
[SECURITY] Fedora 37 Update: lldpd-1.0.16-1.fc37
LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices...
[SECURITY] Fedora 38 Update: lldpd-1.0.16-1.fc38
LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices...
The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in the Cisco NX-OS operating system of Cisco Nexus 9000 Series Fabric Switches in ACI mode allows a attacker to cause a service failure.
The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the Cisco NX-OS operating system of Cisco Nexus 9000 Series Fabric Switches in ACI mode is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failure by sendin...
CVE-2023-20089
A vulnerability in the Link Layer Discovery Protocol LLDP feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, adjacent attacker to cause a memory leak, which could result in an unexpected reload of the device. This...
Design/Logic Flaw
A vulnerability in the Link Layer Discovery Protocol LLDP feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, adjacent attacker to cause a memory leak, which could result in an unexpected reload of the device. This...
CVE-2023-20089
A vulnerability in the Link Layer Discovery Protocol LLDP feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, adjacent attacker to cause a memory leak, which could result in an unexpected reload of the device. This...
PT-2023-2014 · Cisco · Cisco Nexus 9000 Series Fabric Switches
Name of the Vulnerable Software and Affected Versions: Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode affected versions not specified Description: A vulnerability in the Link Layer Discovery Protocol LLDP feature could allow an unauthenticated, adjacent...
K17133899: Multiple Treck TCP/IP stack vulnerabilities
Security Advisory Description CVE-2020-11896 The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling. CVE-2020-11897 The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets. CVE-2020-11898 The Treck TCP/IP stack...
SUSE CVE-2017-13054
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldpprivate8023print...
SUSE CVE-2020-11906
The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow...
SUSE CVE-2020-27827
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...
SUSE CVE-2021-27862
Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion and optionally VLAN0 headers...
openvswitch: Out-of-Bounds Read in Organization Specific TLV
A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a denial of service...
openvswitch: Integer Underflow in Organization Specific TLV
A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a data underflow...
openvswitch: Integer Underflow in Organization Specific TLV
A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a data underflow...
openvswitch: Integer Underflow in Organization Specific TLV
A flaw was found in the OpenvSwitch package. If LLDP processing is enabled for a specific port, crafted LLDP packets could cause a data underflow...