CVE-2021-43612

Опубликовано: 15 апр. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lldpd_project:lldpd:*:*:*:*:*:*:*:*

Версия до 1.0.13 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.01142

Низкий

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2021-43612

CVSS3: 7.5

ubuntu

больше 3 лет назад

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.

CVE-2021-43612

CVSS3: 7.3

redhat

почти 5 лет назад

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.

CVE-2021-43612

CVSS3: 7.5

debian

больше 3 лет назад

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decod ...

GHSA-x6gw-c547-cwm7

CVSS3: 7.5

github

больше 3 лет назад

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.

ALT-PU-2021-3512

CVSS3: 7.5

altlinux

почти 5 лет назад

ALT-PU-2021-3512: package `lldpd` update to version 1.0.13-alt1

EPSS

Процентиль: 67%

0.01142

Низкий

7.5 High

CVSS3

Дефекты

CWE-787