Every CVE Search/ Get API key

CVE-2023-41910

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific...

9.8 CriticalFix available

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.15%Up 1.1 points since Sep 5, 2023
90%50%10%1%

What each source reports

NVD Score used 9.8

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

Record
CVE-2023-41910
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

Record
CVE-2023-41910
Updated
2026-11-02
EUVDEUVD-2023-46388 No score

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

Record
EUVD-2023-46388
Updated
2026-11-03
GitHub AdvisoriesGHSA-5vp9-2h7g-hxq8 9.8

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific...

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

Record
GHSA-5vp9-2h7g-hxq8
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVAZL-28656 9.8

CVE-2023-41910 affecting package lldpd for versions less than 1.0.14-3

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

Record
AZL-28656
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-41910 9.8

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

Record
DEBIAN-CVE-2023-41910
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVRHSA-2024:9158 7.5

Red Hat Security Advisory: lldpd security update

Record
RHSA-2024:9158
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-41910 9.8

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

Record
UBUNTU-CVE-2023-41910
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2024:9158 No score

Moderate: lldpd security update

LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices.

Security Fix(es):

  • lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827)
  • lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612)
  • lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:9158
Updated
2026-11-02
OSVCLSA-2025-1758729003 No score

lldpd: Fix of CVE-2023-41910

  • CVE-2023-41910: fix out-of-bounds read on heap memory in cdp_decode
Record
CLSA-2025-1758729003
Updated
2026-11-02
OSV No score

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

Record
CVE-2023-41910
Updated
2026-11-02
OSVopenSUSE-SU-2026:12272-1 No score

liblldpctl4-1.0.23-1.1 on GA media

These are all security issues fixed in the liblldpctl4-1.0.23-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12272-1
Updated
2026-11-02
OSVRLSA-2024:9158 No score

Moderate: lldpd security update

LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices.

Security Fix(es):

  • lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827)

  • lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612)

  • lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.

Record
RLSA-2024:9158
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
lldpd
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.0.18-4.el9
1.0.18-4.el9
lldpd-devel
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.0.18-4.el9
1.0.18-4.el9
lldpd
Azure Linux:2
 before 1.0.14-3
1.0.14-3
lldpd
TuxCare:AlmaLinux:9.2
 before 1.0.4-10.el9.tuxcare.els2
1.0.4-10.el9.tuxcare.els2
lldpd-devel
TuxCare:AlmaLinux:9.2
 before 1.0.4-10.el9.tuxcare.els2
1.0.4-10.el9.tuxcare.els2
lldpd
Debian:12
 before 1.0.16-1+deb12u1, plus listed versions
1.0.16-1
1.0.16-1+deb12u1
lldpd
Debian:13
 before 1.0.17-1
1.0.17-1
lldpd
Debian:14
 before 1.0.17-1
1.0.17-1
lldpd
Debian:10
 before 1.0.3-1+deb10u2, plus listed versions
1.0.3-11.0.3-1+deb10u1
1.0.3-1+deb10u2
lldpd
Debian:11
 before 1.0.11-1+deb11u2, plus listed versions
1.0.11-11.0.11-1+deb11u1
1.0.11-1+deb11u2
Show 10 moreShow less
Affected packages
PackageAffectedFixed
lldpd
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:1.0.18-4.el9
0:1.0.18-4.el9
lldpd-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:1.0.18-4.el9
0:1.0.18-4.el9
lldpd-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:1.0.18-4.el9
0:1.0.18-4.el9
lldpd-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:1.0.18-4.el9
0:1.0.18-4.el9
lldpd
Rocky Linux:9
From an advisory covering 3 CVEs
 before 0:1.0.18-4.el9
0:1.0.18-4.el9
lldpd
Ubuntu:16.04:LTS
 All versions, plus listed versions
0.7.16-10.7.19-1
 None known
lldpd
Ubuntu:18.04:LTS
 All versions, plus listed versions
0.9.8-10.9.9-10.9.9-1ubuntu0.1
 None known
lldpd
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.0.4-11.0.4-1build11.0.4-1build2
 None known
lldpd
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.0.11-11.0.12-11.0.13-1
 None known
lldpd
openSUSE:Tumbleweed
 before 1.0.23-1.1
1.0.23-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-41910 is a critical vulnerability (CVSS 9.8) in Lldpd Project Lldpd, published September 5, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 66th percentile. Fixed in lldpd 1.0.14-3.

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open