EUVD-2021-30526

Malicious code in bioql PyPI...

RHEL 8 : lldpd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - lldp/openvswitch: denial of service via externally triggered memory leak CVE-2020-27827 - lldpd:...

Fedora 36 : lldpd (2023-3e4feeadec)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3e4feeadec advisory. Update to the latest 1.0.16: Lots of updates, enhancements and fixes from 1.0.4 CVEs: CVE-2020-27827, CVE-2021-43612 Tenable has extracted the...

Fedora 37 : lldpd (2023-c0c184a019)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c0c184a019 advisory. Update to the latest 1.0.16: Lots of updates, enhancements and fixes from 1.0.4 CVEs: CVE-2020-27827, CVE-2021-43612 Tenable has extracted the...

Fedora 38 : lldpd (2023-88991d2713)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-88991d2713 advisory. Update to the latest 1.0.16: Lots of updates, enhancements and fixes from 1.0.4 CVEs: CVE-2020-27827, CVE-2021-43612 Tenable has extracted the...

CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets...

DEBIAN-CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets...

CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets...

CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets...

CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets...

CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets...

CVE-2021-43612

CVE-2021-43612 affects lldpd prior to version 1.0.13. In the sonmp_decode function, decoding short SONMP packets can trigger an out-of-bounds heap read. The vulnerability impacts the lldpd component and can lead to heap memory access violations; no exploitation details are provided in the availab...

CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets...

Debian dla-3389 : liblldpctl-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3389 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3389-1 [email protected]...

SUSE CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmpdecode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets...

CVE-2021-43612

An out-of-bounds read vulnerability is present in lldpd. An attacker on the same network as the vulnerable system may use this vulnerability to leak memory data from the application or crash it by sending shorter SONMP packets than what is expected...

lldpd 缓冲区错误漏洞

lldpd is a daemon capable of receiving and sending LLDP frames. A security vulnerability exists in lldpd that stems from a boundary error when reading SONMP messages. A remote user can send specially crafted packets to the application, trigger a heap-based buffer overflow, and execute arbitrary...