FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-12-16 22:24:57 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
2a4a112a-7c1b-11e5-bd77-0800275369e2lldpd -- Buffer overflow/Denial of service

The lldpd developer Vincent Bernat reports:

A buffer overflow may allow arbitrary code execution only if hardening was disabled.

Malformed packets should not make lldpd crash. Ensure we can handle them by not using assert() in this part.


Discovery 2015-10-04
Entry 2015-10-26
Modified 2015-11-10
lldpd
>= 0.5.6 lt 0.7.19

CVE-2015-8011
CVE-2015-8012
https://github.com/vincentbernat/lldpd/raw/0.7.19/NEWS
http://www.openwall.com/lists/oss-security/2015/10/30/2