Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5vp9-2h7g-hxq8

Опубликовано: 05 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

EPSS

Процентиль: 34%
0.00134
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 2 года назад

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

CVSS3: 7.5
redhat
почти 2 года назад

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

CVSS3: 9.8
nvd
почти 2 года назад

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

CVSS3: 9.8
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 9.8
debian
почти 2 года назад

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU ...

EPSS

Процентиль: 34%
0.00134
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-125