First published: Tue Jan 28 2020(Updated: )
lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Lldpd Project Lldpd | <0.8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2015-8012.
CVE-2015-8012 has a severity value of 7.5 (high).
An attacker can cause a denial of service (assertion failure and daemon crash) by exploiting CVE-2015-8012.
To fix CVE-2015-8012, you should upgrade lldpd to version 0.8.0 or higher.
You can find more information about CVE-2015-8012 at the following references: [Reference 1](http://www.openwall.com/lists/oss-security/2015/10/18/2), [Reference 2](http://www.openwall.com/lists/oss-security/2015/10/30/2), [Reference 3](https://github.com/vincentbernat/lldpd/commit/793526f8884455f43daecd0a2c46772388417a00).