Input validation

A vulnerability in the PROFINET handler for Link Layer Discovery Protocol LLDP messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a crash on an affected device, resulting in a denial of service DoS condition. The vulnerability is du...

CVE-2020-3512 Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in the PROFINET handler for Link Layer Discovery Protocol LLDP messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a crash on an affected device, resulting in a denial of service DoS condition. The vulnerability is du...

CVE-2020-3512

The CVE-2020-3512 issue affects Cisco IOS and IOS XE, specifically the PROFINET LLDP handler. The root cause is insufficient validation of LLDP messages in the PROFINET LLDP handler, enabling an unauthenticated adjacent attacker to crash the device and cause a reload, i.e., a DoS. Cisco’s advisor...

Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in the PROFINET handler for Link Layer Discovery Protocol LLDP messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a crash on an affected device, resulting in a denial of service DoS condition. The vulnerability is du...

PT-2020-4162

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the PROFINET handler for Link Layer Discovery Protocol LLDP messages could allow an unauthenticated, adjacent attacker to cause a cra...

CVE-2020-3512: Uncontrolled Resource Consumption

A vulnerability in the PROFINET handler for Link Layer Discovery Protocol LLDP messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a crash on an affected device, resulting in a denial of service DoS condition. The vulnerability is du...

CVE-2020-7121

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP Link Layer Discovery Protocol process in the switch. This applies to...

Memory corruption

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP Link Layer Discovery Protocol process in the switch. This applies to...

CVE-2020-7121

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP Link Layer Discovery Protocol process in the switch. This applies to...

CVE-2020-7121

Two memory corruption flaws affecting Aruba CX Switches (Series 6200F, 6300, 6400, 8320, 8325, 8400) are described. The root cause is memory corruption in the LLDP processing path, enabling local denial of service when exploiting the vulnerability. Impact is limited to the LLDP daemon on affected...

CVE-2020-7121: Out-of-bounds Write

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP Link Layer Discovery Protocol process in the switch. This applies to...

PT-2020-5836

Name of the Vulnerable Software and Affected Versions: OpenvSwitch versions affected versions not specified Description: A flaw was found in OpenvSwitch related to the implementation of the LLDP protocol. Specially crafted LLDP packets can cause memory loss when allocating data to handle specific...

CVE-2020-1641

A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service DoS. This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP...

CVE-2020-1641

A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service DoS. This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP...

Race condition

A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service DoS. This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP...

CVE-2020-1641 Junos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.

A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service DoS. This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP...

CVE-2020-1641

The CVE-2020-1641 entry describes a race-condition in Juniper Networks Junos OS LLDP handling: crafted LLDP packets can cause the LLDP process to crash, resulting in a Denial of Service. The issue is tied to memory/resource limits (RLIMIT) and may produce multiple LACP flaps after the LLDP crash....

CVE-2020-1641: Concurrent Execution using Shared Resource with Improper Synchronization

A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service DoS. This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP...

PT-2020-14870

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3R12-S15 Juniper Networks Junos OS 12.3X48 versions prior to 12.3X48-D95 Juniper Networks Junos OS 15.1 versions prior to 15.1R7-S6 Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D200...

Juniper Junos LLDP Packet DoS JSA11027

According to the self-reported version of Junos OS, the remote device is affected by a denial of service DoS vulnerability due to its implementation of LLDP. An unauthenticated attacker can exploit this, by sending crafted LLDP packets from an adjacent device, in order to cause LLDP to crash. Not...