Critical severity · published Sep 5, 2023
CVE-2023-41910
An issue was discovered in lldpd before 1.0.17
9.8
CVSS
1.1%
EPSS
No
On KEV
Description
An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LL
Lldpd · Lldpd Project
before 1.0.17 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-41910
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-41910
Patch
https://github.com/lldpd/lldpd/commit/a9aeabdf879c25c584852a0bb5523837632f099b
Release Notes
https://github.com/lldpd/lldpd/releases/tag/1.0.17
lists.debian.org
https://lists.debian.org/debian-lts-announce/2023/09/msg00025.html
www.debian.org
https://www.debian.org/security/2023/dsa-5505
More from Lldpd
9.8
CVE-2015-8011
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly…
7.5
CVE-2021-43612
In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets
7.5
CVE-2020-27827
A flaw was found in multiple versions of OpenvSwitch
7.5
CVE-2015-8012
lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet
6.5
CVE-2026-46433
lldpd: Heap OOB Read in VLAN Decapsulation memmove