Medium ELSA-2024-9158 3 CVEs

Moderate: lldpd security update (Oracle Linux 9)

Published Nov 14, 2024 · Updated Nov 14, 2024

Ecosystem: Oracle Linux

Summary

[1.0.18-3]
- Add lldpd-devel package [RHEL-22127]

[1.0.18-2]
- Remove networkd gating test [RHEL-25990]

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	lldpd	0:1.0.18-4.el9
Oracle Linux · 9	lldpd-devel	0:1.0.18-4.el9

Vulnerabilities 3

High 7.5

CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when a…

openvswitch openvswitch openvswitch lldpd Debian Ubuntu Azure Linux Alpine

Mar 18, 2021
High 7.5

CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bo…

lldpd lldpd lldpd Debian Ubuntu Alpine

Apr 15, 2023
Unscored —

CVE-2023-41910

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a ma…

lldpd lldpd lldpd Debian Ubuntu Azure Linux

Sep 5, 2023