CVE-2015-8011

Katalog CVE

CVSS 9.8 · Critical EPSS 5,5%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada lldpd project lldpd, debian linux +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.

Rincian

Terbit di NVD

28 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

5,5% peluang dieksploitasi; lebih tinggi dari 92,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2015/10/16/2 mailing list · patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2015/10/30/2 mailing list · patch · advisory pihak ketiga
• https://github.com/vincentbernat/lldpd/commit/dd4f16e7e816f2165fba76e3d162cd8d2978dcb2 patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4836 advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJ4DXFJWMZ325...
• https://us-cert.cisa.gov/ics/advisories/icsa-21-194-07