150 matches found
CVE-2015-8012
lldpd before 0.8.0 allows remote attackers to cause a denial of service assertion failure and daemon crash via a malformed packet...
CVE-2015-8012
CVE-2015-8012 affects lldpd up to version 0.8.0. A malformed packet can trigger an assertion failure in the daemon, causing denial of service via a crash. Multiple connected sources corroborate: remote attacker–sent malformed LLDP frames lead to daemon instability/crash (no confirmed remote code ...
CVE-2015-8012
lldpd before 0.8.0 allows remote attackers to cause a denial of service assertion failure and daemon crash via a malformed packet...
CVE-2015-8012: Reachable Assertion
lldpd before 0.8.0 allows remote attackers to cause a denial of service assertion failure and daemon crash via a malformed packet...
CVE-2015-8011: Buffer Copy without Checking Size of Input
Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...
PT-2020-7902
Name of the Vulnerable Software and Affected Versions: lldpd versions prior to 0.8.0 Description: The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon crash, by sending a malformed packet. Recommendations: For versions prior to 0.8.0, update...
lldpd: denial of service
CVE-2015-5714 denial of service A buffer overflow has been discovered when handling management address TLV. When a remote device was advertising a too large management address while still respecting TLV boundaries, lldpd would crash due to a buffer overflow. - CVE-2015-5715 denial of service A...
FreeBSD : lldpd -- Buffer overflow/Denial of service (2a4a112a-7c1b-11e5-bd77-0800275369e2)
The lldpd developer Vincent Bernat reports : A buffer overflow may allow arbitrary code execution only if hardening was disabled. Malformed packets should not make lldpd crash. Ensure we can handle them by not using assert in this part. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
lldpd -- Buffer overflow/Denial of service
The lldpd developer Vincent Bernat reports: A buffer overflow may allow arbitrary code execution only if hardening was disabled. Malformed packets should not make lldpd crash. Ensure we can handle them by not using assert in this part...
PT-2015-3400
Name of the Vulnerable Software and Affected Versions lldpd versions prior to 0.8.0 Description The issue is related to a buffer overflow in the lldp decode function, which can be exploited by remote attackers to cause a denial of service, potentially leading to a daemon crash, and possibly execu...