CVE-2015-8011
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0...
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
9.8
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
- Record
CVE-2015-8011- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
- Record
CVE-2015-8011- Updated
- 2026-11-02
EUVDEUVD-2015-7907 No score
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
- Record
EUVD-2015-7907- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9f79-mcm7-48p3 No score
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0...
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
- Record
GHSA-9f79-mcm7-48p3- Weakness
- CWE-120
- Updated
- 2026-11-02
OSVALPINE-CVE-2015-8011
9.8
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
- Record
ALPINE-CVE-2015-8011- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
9.8
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
- Record
CVE-2015-8011- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 15 moreShow less
OSVDEBIAN-CVE-2015-8011
9.8
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
- Record
DEBIAN-CVE-2015-8011- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2021-1179
9.8
openvswitch security update
Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license.
Security Fix(es):
A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2020-35498)
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2020-27827)
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.(CVE-2015-8011)
- Record
OESA-2021-1179- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHBA-2020:5306
9.8
Red Hat Bug Fix Advisory: openvswitch2.13 bug fix and enhancement update
- Record
RHBA-2020:5306- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHBA-2020:5307
9.8
Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update
- Record
RHBA-2020:5307- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHBA-2020:5310
9.8
Red Hat Bug Fix Advisory: openvswitch2.13 bug fix and enhancement update
- Record
RHBA-2020:5310- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHBA-2020:5311
9.8
Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update
- Record
RHBA-2020:5311- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:5611
9.8
Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update
- Record
RHSA-2020:5611- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:5615
9.8
Red Hat Security Advisory: OpenShift Container Platform 4.6.9 packages and security update
- Record
RHSA-2020:5615- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0028
9.8
Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update
- Record
RHSA-2021:0028- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0931
9.8
Red Hat Security Advisory: openvswitch2.11 and ovn2.11 security update
- Record
RHSA-2021:0931- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:0988
9.8
Red Hat Security Advisory: rhvm-appliance security, bug fix, and enhancement update
- Record
RHSA-2021:0988- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2077
9.8
Red Hat Security Advisory: openvswitch security update
- Record
RHSA-2021:2077- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2205
9.8
Red Hat Security Advisory: Red Hat OpenStack Platform 10.0 (openvswitch) security update
- Record
RHSA-2021:2205- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-8011
9.8
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
- Record
UBUNTU-CVE-2015-8011- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUSN-4691-1 No score
openvswitch vulnerabilities
Jonas Rudloff discovered that Open vSwitch incorrectly handled certain malformed LLDP packets. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-4691-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openvswitchAlpine:v3.13 |
before 2.12.2-r0 | 2.12.2-r0 |
openvswitchAlpine:v3.14 |
before 2.12.2-r0 | 2.12.2-r0 |
openvswitchAlpine:v3.15 |
before 2.12.2-r0 | 2.12.2-r0 |
openvswitchAlpine:v3.16 |
before 2.12.2-r0 | 2.12.2-r0 |
openvswitchAlpine:v3.17 |
before 2.12.2-r0 | 2.12.2-r0 |
openvswitchAlpine:v3.18 |
before 2.12.2-r0 | 2.12.2-r0 |
openvswitchAlpine:v3.19 |
before 2.12.2-r0 | 2.12.2-r0 |
openvswitchAlpine:v3.20 |
before 2.12.2-r0 | 2.12.2-r0 |
openvswitchAlpine:v3.21 |
before 2.12.2-r0 | 2.12.2-r0 |
openvswitchAlpine:v3.22 |
before 2.12.2-r0 | 2.12.2-r0 |
Show 99 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openvswitchAlpine:v3.23 |
before 2.12.2-r0 | 2.12.2-r0 |
openvswitchAlpine:v3.24 |
before 2.12.2-r0 | 2.12.2-r0 |
lldpdDebian:12 |
before 0.7.19-1 | 0.7.19-1 |
lldpdDebian:13 |
before 0.7.19-1 | 0.7.19-1 |
lldpdDebian:14 |
before 0.7.19-1 | 0.7.19-1 |
openvswitchDebian:12 |
before 2.15.0~git20210104.def6eb1ea+dfsg1-1 | 2.15.0~git20210104.def6eb1ea+dfsg1-1 |
openvswitchDebian:13 |
before 2.15.0~git20210104.def6eb1ea+dfsg1-1 | 2.15.0~git20210104.def6eb1ea+dfsg1-1 |
openvswitchDebian:14 |
before 2.15.0~git20210104.def6eb1ea+dfsg1-1 | 2.15.0~git20210104.def6eb1ea+dfsg1-1 |
openvswitchDebian:9 From an advisory covering 6 CVEs |
before 2.6.10-0+deb9u1, plus listed versions 2.6.2~pre+git20161223-3 |
2.6.10-0+deb9u1 |
openvswitchDebian:10 From an advisory covering 2 CVEs |
before 2.10.6+ds1-0+deb10u1, plus listed versions 2.10.0+2018.08.28+git.8ca7c82b7d+ds1-122.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u12.10.0+2018.08.28+git.8ca7c82b7d+ds1-12+deb10u22.10.0+2018.08.28+git.8ca7c82b7d+ds1-13 |
2.10.6+ds1-0+deb10u1 |
openvswitchopenEuler:20.03-LTS-SP1 From an advisory covering 3 CVEs |
before 2.12.0-11.oe1 | 2.12.0-11.oe1 |
openvswitch2.13Red Hat:enterprise_linux:7::fastdatapath |
before 0:2.13.0-62.el7fdp | 0:2.13.0-62.el7fdp |
openvswitch2.13-debuginfoRed Hat:enterprise_linux:7::fastdatapath |
before 0:2.13.0-62.el7fdp | 0:2.13.0-62.el7fdp |
openvswitch2.13-develRed Hat:enterprise_linux:7::fastdatapath |
before 0:2.13.0-62.el7fdp | 0:2.13.0-62.el7fdp |
openvswitch2.13-testRed Hat:enterprise_linux:7::fastdatapath |
before 0:2.13.0-62.el7fdp | 0:2.13.0-62.el7fdp |
python3-openvswitch2.13Red Hat:enterprise_linux:7::fastdatapath |
before 0:2.13.0-62.el7fdp | 0:2.13.0-62.el7fdp |
openvswitch2.11Red Hat:enterprise_linux:7::fastdatapath |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-debuginfoRed Hat:enterprise_linux:7::fastdatapath |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-develRed Hat:enterprise_linux:7::fastdatapath |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-testRed Hat:enterprise_linux:7::fastdatapath |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
python-openvswitch2.11Red Hat:enterprise_linux:7::fastdatapath |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
network-scripts-openvswitch2.13Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-71.el8fdp | 0:2.13.0-71.el8fdp |
openvswitch2.13Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-71.el8fdp | 0:2.13.0-71.el8fdp |
openvswitch2.13-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-71.el8fdp | 0:2.13.0-71.el8fdp |
openvswitch2.13-debugsourceRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-71.el8fdp | 0:2.13.0-71.el8fdp |
openvswitch2.13-develRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-71.el8fdp | 0:2.13.0-71.el8fdp |
openvswitch2.13-testRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-71.el8fdp | 0:2.13.0-71.el8fdp |
python3-openvswitch2.13Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-71.el8fdp | 0:2.13.0-71.el8fdp |
python3-openvswitch2.13-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-71.el8fdp | 0:2.13.0-71.el8fdp |
network-scripts-openvswitch2.11Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.11.3-74.el8fdp | 0:2.11.3-74.el8fdp |
openvswitch2.11Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.11.3-74.el8fdp | 0:2.11.3-74.el8fdp |
openvswitch2.11-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.11.3-74.el8fdp | 0:2.11.3-74.el8fdp |
openvswitch2.11-debugsourceRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.11.3-74.el8fdp | 0:2.11.3-74.el8fdp |
openvswitch2.11-develRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.11.3-74.el8fdp | 0:2.11.3-74.el8fdp |
openvswitch2.11-testRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.11.3-74.el8fdp | 0:2.11.3-74.el8fdp |
python3-openvswitch2.11Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.11.3-74.el8fdp | 0:2.11.3-74.el8fdp |
python3-openvswitch2.11-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.11.3-74.el8fdp | 0:2.11.3-74.el8fdp |
redhat-virtualization-hostRed Hat:rhev_hypervisor:4.4::el8 From an advisory covering 2 CVEs |
before 0:4.4.3-20201210.0.el8_3 | 0:4.4.3-20201210.0.el8_3 |
redhat-virtualization-host-image-updateRed Hat:rhev_hypervisor:4.4::el8 From an advisory covering 2 CVEs |
before 0:4.4.3-20201210.0.el8_3 | 0:4.4.3-20201210.0.el8_3 |
cockpit-ovirtRed Hat:rhev_hypervisor:4.4::el8 From an advisory covering 2 CVEs |
before 0:0.14.15-1.el8ev | 0:0.14.15-1.el8ev |
cockpit-ovirt-dashboardRed Hat:rhev_hypervisor:4.4::el8 From an advisory covering 2 CVEs |
before 0:0.14.15-1.el8ev | 0:0.14.15-1.el8ev |
network-scripts-openvswitch2.13Red Hat:openshift:4.6::el8 |
before 0:2.13.0-72.el8fdp | 0:2.13.0-72.el8fdp |
openvswitch2.13Red Hat:openshift:4.6::el8 |
before 0:2.13.0-72.el8fdp | 0:2.13.0-72.el8fdp |
openvswitch2.13-debuginfoRed Hat:openshift:4.6::el8 |
before 0:2.13.0-72.el8fdp | 0:2.13.0-72.el8fdp |
openvswitch2.13-debugsourceRed Hat:openshift:4.6::el8 |
before 0:2.13.0-72.el8fdp | 0:2.13.0-72.el8fdp |
openvswitch2.13-develRed Hat:openshift:4.6::el8 |
before 0:2.13.0-72.el8fdp | 0:2.13.0-72.el8fdp |
openvswitch2.13-testRed Hat:openshift:4.6::el8 |
before 0:2.13.0-72.el8fdp | 0:2.13.0-72.el8fdp |
python3-openvswitch2.13Red Hat:openshift:4.6::el8 |
before 0:2.13.0-72.el8fdp | 0:2.13.0-72.el8fdp |
python3-openvswitch2.13-debuginfoRed Hat:openshift:4.6::el8 |
before 0:2.13.0-72.el8fdp | 0:2.13.0-72.el8fdp |
openvswitch2.11Red Hat:enterprise_linux:7::hypervisor |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-debuginfoRed Hat:enterprise_linux:7::hypervisor |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-develRed Hat:enterprise_linux:7::hypervisor |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
ovn2.11Red Hat:enterprise_linux:7::hypervisor |
before 0:2.11.1-56.el7fdp | 0:2.11.1-56.el7fdp |
ovn2.11-debuginfoRed Hat:enterprise_linux:7::hypervisor |
before 0:2.11.1-56.el7fdp | 0:2.11.1-56.el7fdp |
ovn2.11-hostRed Hat:enterprise_linux:7::hypervisor |
before 0:2.11.1-56.el7fdp | 0:2.11.1-56.el7fdp |
ovn2.11-vtepRed Hat:enterprise_linux:7::hypervisor |
before 0:2.11.1-56.el7fdp | 0:2.11.1-56.el7fdp |
python-openvswitch2.11Red Hat:enterprise_linux:7::hypervisor |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
redhat-virtualization-hostRed Hat:enterprise_linux:7::hypervisor |
before 0:4.3.12-20201216.0.el7_9 | 0:4.3.12-20201216.0.el7_9 |
redhat-virtualization-host-image-updateRed Hat:enterprise_linux:7::hypervisor |
before 0:4.3.12-20201216.0.el7_9 | 0:4.3.12-20201216.0.el7_9 |
openvswitch2.11Red Hat:rhev_manager:4.3 |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-debuginfoRed Hat:rhev_manager:4.3 |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-develRed Hat:rhev_manager:4.3 |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
ovn2.11Red Hat:rhev_manager:4.3 |
before 0:2.11.1-56.el7fdp | 0:2.11.1-56.el7fdp |
ovn2.11-centralRed Hat:rhev_manager:4.3 |
before 0:2.11.1-56.el7fdp | 0:2.11.1-56.el7fdp |
ovn2.11-debuginfoRed Hat:rhev_manager:4.3 |
before 0:2.11.1-56.el7fdp | 0:2.11.1-56.el7fdp |
ovn2.11-vtepRed Hat:rhev_manager:4.3 |
before 0:2.11.1-56.el7fdp | 0:2.11.1-56.el7fdp |
python-openvswitch2.11Red Hat:rhev_manager:4.3 |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch-selinux-extra-policyRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:1.0-17.el7fdp | 0:1.0-17.el7fdp |
openvswitch2.11Red Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-debuginfoRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-develRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
ovn2.11Red Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.1-57.el7fdp | 0:2.11.1-57.el7fdp |
ovn2.11-centralRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.1-57.el7fdp | 0:2.11.1-57.el7fdp |
ovn2.11-debuginfoRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.1-57.el7fdp | 0:2.11.1-57.el7fdp |
ovn2.11-hostRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.1-57.el7fdp | 0:2.11.1-57.el7fdp |
ovn2.11-vtepRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.1-57.el7fdp | 0:2.11.1-57.el7fdp |
python-openvswitch2.11Red Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
openvswitch2.11-testRed Hat:openstack:13::el7 From an advisory covering 4 CVEs |
before 0:2.11.3-77.el7fdp | 0:2.11.3-77.el7fdp |
rhvm-applianceRed Hat:rhev_hypervisor:4.4::el8 From an advisory covering 3 CVEs |
before 2:4.4-20210310.0.el8ev | 2:4.4-20210310.0.el8ev |
openvswitchRed Hat:enterprise_linux:7::hypervisor From an advisory covering 3 CVEs |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitch-debuginfoRed Hat:enterprise_linux:7::hypervisor From an advisory covering 3 CVEs |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitch-develRed Hat:enterprise_linux:7::hypervisor From an advisory covering 3 CVEs |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
python-openvswitchRed Hat:enterprise_linux:7::hypervisor From an advisory covering 3 CVEs |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitchRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 3 CVEs |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitch-debuginfoRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 3 CVEs |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitch-develRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 3 CVEs |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitch-testRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 3 CVEs |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
python-openvswitchRed Hat:enterprise_linux:7::fastdatapath From an advisory covering 3 CVEs |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitchRed Hat:openstack:10::el7 |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitch-debuginfoRed Hat:openstack:10::el7 |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitch-develRed Hat:openstack:10::el7 |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
python-openvswitchRed Hat:openstack:10::el7 |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitch-testRed Hat:openstack:10::el7 |
before 0:2.9.9-1.el7fdp | 0:2.9.9-1.el7fdp |
openvswitchUbuntu:16.04:LTS |
before 2.5.9-0ubuntu0.16.04.2, plus listed versions 2.4.0-0ubuntu42.4.0-0ubuntu52.5.0~git20160129.46a88d9-0ubuntu12.5.0~git20160219.522aca6-0ubuntu12.5.0~git20160219.522aca6-0ubuntu2 Show 8 moreShow less2.5.0~git20160219.522aca6-0ubuntu32.5.0-0ubuntu12.5.2-0ubuntu0.16.04.12.5.2-0ubuntu0.16.04.22.5.2-0ubuntu0.16.04.32.5.4-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.2 |
2.5.9-0ubuntu0.16.04.2 |
openvswitchUbuntu:18.04:LTS |
before 2.9.7-0ubuntu0.18.04.2, plus listed versions 2.8.0-0ubuntu22.8.1-0ubuntu22.8.1-0ubuntu32.9.0~git20180205.5a39582ca-0ubuntu12.9.0-0ubuntu12.9.2-0ubuntu0.18.04.22.9.2-0ubuntu0.18.04.32.9.5-0ubuntu0.18.04.1 |
2.9.7-0ubuntu0.18.04.2 |
openvswitchUbuntu:20.04:LTS |
before 2.13.1-0ubuntu0.20.04.3, plus listed versions 2.12.0-0ubuntu12.12.0-0ubuntu22.12.1~git20191107.7accd1302-0ubuntu12.12.90~git20200107.af683565b-0ubuntu12.12.90~git20200107.af683565b-0ubuntu2 Show 6 moreShow less2.12.90~git20200107.af683565b-0ubuntu32.13.0~git20200127.dbdf66c29-0ubuntu22.13.0~git20200212.15ae9db33-0ubuntu12.13.0~git20200212.15ae9db33-0ubuntu22.13.0-0ubuntu12.13.1-0ubuntu0.20.04.1 |
2.13.1-0ubuntu0.20.04.3 |
openvswitchUbuntu:16.04:LTS From an advisory covering 2 CVEs |
before 2.5.9-0ubuntu0.16.04.2, plus listed versions 2.4.0-0ubuntu42.4.0-0ubuntu52.5.0~git20160129.46a88d9-0ubuntu12.5.0~git20160219.522aca6-0ubuntu12.5.0~git20160219.522aca6-0ubuntu2 Show 8 moreShow less2.5.0~git20160219.522aca6-0ubuntu32.5.0-0ubuntu12.5.2-0ubuntu0.16.04.12.5.2-0ubuntu0.16.04.22.5.2-0ubuntu0.16.04.32.5.4-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.2 |
2.5.9-0ubuntu0.16.04.2 |
openvswitchUbuntu:18.04:LTS From an advisory covering 2 CVEs |
before 2.9.7-0ubuntu0.18.04.2, plus listed versions 2.8.0-0ubuntu22.8.1-0ubuntu22.8.1-0ubuntu32.9.0~git20180205.5a39582ca-0ubuntu12.9.0-0ubuntu12.9.2-0ubuntu0.18.04.22.9.2-0ubuntu0.18.04.32.9.5-0ubuntu0.18.04.1 |
2.9.7-0ubuntu0.18.04.2 |
openvswitchUbuntu:20.04:LTS From an advisory covering 2 CVEs |
before 2.13.1-0ubuntu0.20.04.3, plus listed versions 2.12.0-0ubuntu12.12.0-0ubuntu22.12.1~git20191107.7accd1302-0ubuntu12.12.90~git20200107.af683565b-0ubuntu12.12.90~git20200107.af683565b-0ubuntu2 Show 6 moreShow less2.12.90~git20200107.af683565b-0ubuntu32.13.0~git20200127.dbdf66c29-0ubuntu22.13.0~git20200212.15ae9db33-0ubuntu12.13.0~git20200212.15ae9db33-0ubuntu22.13.0-0ubuntu12.13.1-0ubuntu0.20.04.1 |
2.13.1-0ubuntu0.20.04.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-8011 is a critical vulnerability (CVSS 9.8) in Lldpd Project Lldpd, published January 28, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.47%, the 92nd percentile. Fixed in openvswitch 2.12.2-r0.
References
openwall.com/lists/oss-security/2015/10/16/2
openwall.com/lists/oss-security/2015/10/30/2
github.com/vincentbernat/lldpd/commit/dd4f16e7e816f2165fba76e3d162cd8d2978dcb2
debian.org/security/2021/dsa-4836
lists.debian.org/debian-lts-announce/2021/02/msg00032.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJ4DXFJWMZ325ECZXPZOSK7BOEDJZHPR
Show 97 moreShow less
cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf
us-cert.cisa.gov/ics/advisories/icsa-21-194-07
nvd.nist.gov/vuln/detail/CVE-2015-8011
lists.fedoraproject.org/archives/list/[email protected]/message/UJ4DXFJWMZ325ECZXPZOSK7BOEDJZHPR
github.com/advisories/GHSA-9f79-mcm7-48p3
security.alpinelinux.org/vuln/CVE-2015-8011
security-tracker.debian.org/tracker/CVE-2015-8011
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1179
nvd.nist.gov/vuln/detail/CVE-2020-35498
nvd.nist.gov/vuln/detail/CVE-2020-27827
access.redhat.com/errata/RHBA-2020:5306
bugzilla.redhat.com/show_bug.cgi?id=1894096
security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_5306.json
access.redhat.com/security/cve/CVE-2015-8011
bugzilla.redhat.com/show_bug.cgi?id=1896536
cve.org/CVERecord?id=CVE-2015-8011
access.redhat.com/errata/RHBA-2020:5307
bugzilla.redhat.com/show_bug.cgi?id=1890095
bugzilla.redhat.com/show_bug.cgi?id=1894100
security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_5307.json
access.redhat.com/errata/RHBA-2020:5310
bugzilla.redhat.com/show_bug.cgi?id=1842032
bugzilla.redhat.com/show_bug.cgi?id=1886836
bugzilla.redhat.com/show_bug.cgi?id=1894090
security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_5310.json
access.redhat.com/errata/RHBA-2020:5311
bugzilla.redhat.com/show_bug.cgi?id=1894092
security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_5311.json
access.redhat.com/errata/RHSA-2020:5611
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1835685
bugzilla.redhat.com/show_bug.cgi?id=1857412
bugzilla.redhat.com/show_bug.cgi?id=1895356
bugzilla.redhat.com/show_bug.cgi?id=1895762
bugzilla.redhat.com/show_bug.cgi?id=1898023
bugzilla.redhat.com/show_bug.cgi?id=1898024
bugzilla.redhat.com/show_bug.cgi?id=1901423
bugzilla.redhat.com/show_bug.cgi?id=1902301
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5611.json
access.redhat.com/security/cve/CVE-2020-8203
cve.org/CVERecord?id=CVE-2020-8203
nvd.nist.gov/vuln/detail/CVE-2020-8203
hackerone.com/reports/712065
npmjs.com/advisories/1523
access.redhat.com/errata/RHSA-2020:5615
bugzilla.redhat.com/show_bug.cgi?id=1908516
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5615.json
access.redhat.com/errata/RHSA-2021:0028
bugzilla.redhat.com/show_bug.cgi?id=1898513
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0028.json
access.redhat.com/errata/RHSA-2021:0931
bugzilla.redhat.com/show_bug.cgi?id=1828867
bugzilla.redhat.com/show_bug.cgi?id=1828874
bugzilla.redhat.com/show_bug.cgi?id=1828884
bugzilla.redhat.com/show_bug.cgi?id=1905246
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0931.json
access.redhat.com/security/cve/CVE-2020-10722
cve.org/CVERecord?id=CVE-2020-10722
nvd.nist.gov/vuln/detail/CVE-2020-10722
bugs.dpdk.org/show_bug.cgi?id=267
openwall.com/lists/oss-security/2020/05/18/2
access.redhat.com/security/cve/CVE-2020-10723
cve.org/CVERecord?id=CVE-2020-10723
nvd.nist.gov/vuln/detail/CVE-2020-10723
bugs.dpdk.org/show_bug.cgi?id=268
access.redhat.com/security/cve/CVE-2020-10724
cve.org/CVERecord?id=CVE-2020-10724
nvd.nist.gov/vuln/detail/CVE-2020-10724
bugs.dpdk.org/show_bug.cgi?id=269
access.redhat.com/errata/RHSA-2021:0988
bugzilla.redhat.com/show_bug.cgi?id=1865744
bugzilla.redhat.com/show_bug.cgi?id=1865746
bugzilla.redhat.com/show_bug.cgi?id=1915881
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0988.json
access.redhat.com/security/cve/CVE-2020-14349
cve.org/CVERecord?id=CVE-2020-14349
nvd.nist.gov/vuln/detail/CVE-2020-14349
access.redhat.com/security/cve/CVE-2020-14350
cve.org/CVERecord?id=CVE-2020-14350
nvd.nist.gov/vuln/detail/CVE-2020-14350
access.redhat.com/errata/RHSA-2021:2077
bugzilla.redhat.com/show_bug.cgi?id=1908845
bugzilla.redhat.com/show_bug.cgi?id=1921438
bugzilla.redhat.com/show_bug.cgi?id=1950032
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2077.json
access.redhat.com/security/cve/CVE-2020-27827
cve.org/CVERecord?id=CVE-2020-27827
mail.openvswitch.org/pipermail/ovs-dev/2021-January/379471.html
access.redhat.com/security/cve/CVE-2020-35498
cve.org/CVERecord?id=CVE-2020-35498
openwall.com/lists/oss-security/2021/02/10/4
access.redhat.com/errata/RHSA-2021:2205
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2205.json
ubuntu.com/security/CVE-2015-8011
mail.openvswitch.org/pipermail/ovs-announce/2021-January/000268.html
ubuntu.com/security/notices/USN-4691-1
ubuntu.com/security/CVE-2020-27827