Skip to content
OpenAdvisories

Package · Ubuntu

lldpd

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    lldpd: Heap OOB Read in VLAN Decapsulation memmove

    lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips 802.1Q VLAN tags from received Ethernet frames by calling memmove() to shift the frame payload 4 bytes left. The third argument (byte count…