CVE-2021-43612

Опубликовано: 15 апр. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lldpd_project:lldpd:*:*:*:*:*:*:*:*

Версия до 1.0.13 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00135

Низкий

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2021-43612

CVSS3: 7.5

ubuntu

около 2 лет назад

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.

CVE-2021-43612

CVSS3: 7.3

redhat

больше 3 лет назад

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.

CVE-2021-43612

CVSS3: 7.5

debian

около 2 лет назад

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decod ...

GHSA-x6gw-c547-cwm7

CVSS3: 7.5

github

около 2 лет назад

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.

ELSA-2024-9158

oracle-oval

8 месяцев назад

ELSA-2024-9158: lldpd security update (MODERATE)

EPSS

Процентиль: 34%

0.00135

Низкий

7.5 High

CVSS3

Дефекты

CWE-787