CVE-2015-8011

Published January 28th, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.

lldpd/lldpd

implementation of IEEE 802.1ab (LLDP)

GitHub

697