Package · Debian

lldpd

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

Medium 6.5

CVE-2026-46433

lldpd: Heap OOB Read in VLAN Decapsulation memmove

lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips 802.1Q VLAN tags from received Ethernet frames by calling memmove() to shift the frame payload 4 bytes left. The third argument (byte count…

lldpd lldpd openvswitch lldpd Debian Ubuntu Alpine

Jun 9, 2026
Unscored —

CVE-2023-41910

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a ma…

lldpd lldpd Debian Ubuntu

Sep 5, 2023
High 7.5

CVE-2021-43612

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bo…

lldpd lldpd lldpd Debian Ubuntu Alpine

Apr 15, 2023
High 7.5

CVE-2020-27827

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when a…

openvswitch openvswitch openvswitch lldpd Debian Ubuntu Alpine

Mar 18, 2021
Unscored —

CVE-2015-8011

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to…

openvswitch openvswitch openvswitch lldpd Debian Ubuntu Alpine

Jan 28, 2020
Unscored —

CVE-2015-8012

lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malf…

lldpd Debian

Jan 28, 2020