{"id":"CVE-2023-41910","aliases":["ALSA-2024:9158","AZL-28656","CLSA-2025-1758729003","DEBIAN-CVE-2023-41910","DLA-3578-1","DSA-5505-1","EUVD-2023-46388","GHSA-5vp9-2h7g-hxq8","RHSA-2024:9158","RLSA-2024:9158","UBUNTU-CVE-2023-41910","openSUSE-SU-2026:12272-1"],"status":"published","title":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific...","description":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01147,"percentile":0.67048,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2023-09-05T00:00:00Z","modified":"2026-10-29T11:31:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"lldpd","fixed_in":["1.0.14-3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"lldpd","fixed_in":["1.0.4-10.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"lldpd-devel","fixed_in":["1.0.4-10.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"lldpd","fixed_in":["1.0.16-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lldpd","fixed_in":["1.0.17-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lldpd","fixed_in":["1.0.17-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"lldpd","fixed_in":["1.0.3-1+deb10u2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"lldpd","fixed_in":["1.0.11-1+deb11u2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"lldpd","fixed_in":["1.0.23-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-4.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"lldpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-4.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.14-3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-10.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"lldpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.4-10.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.16-1+deb12u1"}]}],"versions":["1.0.16-1"]},{"source":"osv","ecosystem":"Debian:13","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.17-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.17-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1+deb10u2"}]}],"versions":["1.0.3-1","1.0.3-1+deb10u1"]},{"source":"osv","ecosystem":"Debian:11","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.11-1+deb11u2"}]}],"versions":["1.0.11-1","1.0.11-1+deb11u1"]},{"source":"osv","ecosystem":"Debian:12","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.16-1+deb12u1"}]}],"versions":["1.0.16-1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-4.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"lldpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-4.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"lldpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-4.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"lldpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-4.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-4.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.16-1","0.7.19-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.8-1","0.9.9-1","0.9.9-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.4-1","1.0.4-1build1","1.0.4-1build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.11-1","1.0.12-1","1.0.13-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"lldpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.23-1.1"}]}]}],"products":[{"vendor":"lldpd_project","product":"lldpd"}],"references":[{"url":"https://github.com/lldpd/lldpd/releases/tag/1.0.17","tags":["x_transferred","Release Notes","web","report"]},{"url":"https://github.com/lldpd/lldpd/commit/a9aeabdf879c25c584852a0bb5523837632f099b","tags":["x_transferred","Patch","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00025.html","tags":["mailing-list","x_transferred","article"]},{"url":"https://www.debian.org/security/2023/dsa-5505","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41910","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-5vp9-2h7g-hxq8"},{"url":"https://access.redhat.com/errata/RHSA-2024:9158","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27827","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43612","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41910","tags":["report"]},{"url":"https://bugzilla.redhat.com/1921438","tags":["report"]},{"url":"https://bugzilla.redhat.com/2040388","tags":["report"]},{"url":"https://bugzilla.redhat.com/2237411","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9158.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1758729003.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41910.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-41910","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237411","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-22127","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-25990","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-5787","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9158.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27827","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27827","tags":["advisory"]},{"url":"https://mail.openvswitch.org/pipermail/ovs-dev/2021-January/379471.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43612","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43612","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41910","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9158","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-41910","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41910","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-41910","description":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.","status":"published","published":"2023-09-05T00:00:00Z","modified":"2024-09-30T17:18:00.941Z","updated_at":"2026-11-02T14:35:18.88314Z"}],"euvd":[{"id":"EUVD-2023-46388","description":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.","status":"published","published":"2023-09-05T00:00:00Z","modified":"2024-09-30T17:18:00Z","updated_at":"2026-11-03T00:28:02.402482Z"}],"ghsa":[{"id":"GHSA-5vp9-2h7g-hxq8","title":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific...","description":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.","status":"published","published":"2023-09-05T09:30:21Z","modified":"2024-04-11T21:18:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:57:09.764736Z"}],"nvd":[{"id":"CVE-2023-41910","description":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.","status":"published","published":"2023-09-05T07:15:14.927Z","modified":"2026-06-17T06:23:03.177Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:08:27.181588Z"}],"osv":[{"id":"AZL-28656","title":"CVE-2023-41910 affecting package lldpd for versions less than 1.0.14-3","description":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.","status":"published","published":"2023-09-05T07:15:14Z","modified":"2026-04-21T04:25:55.955538Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"DEBIAN-CVE-2023-41910","description":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.","status":"published","published":"2023-09-05T07:15:14.927Z","modified":"2026-10-26T18:03:06.870627171Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"RHSA-2024:9158","title":"Red Hat Security Advisory: lldpd security update","status":"published","published":"2024-11-15T07:39:57Z","modified":"2026-08-07T10:16:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"UBUNTU-CVE-2023-41910","description":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.","status":"published","published":"2023-09-05T07:15:00Z","modified":"2026-04-22T14:12:01.085986Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:9158","title":"Moderate: lldpd security update","description":"LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices.  \n\nSecurity Fix(es):  \n\n  * lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827)\n  * lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612)\n  * lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2024-11-12T00:00:00Z","modified":"2026-10-29T11:31:51.958917501Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"CLSA-2025-1758729003","title":"lldpd: Fix of CVE-2023-41910","description":"- CVE-2023-41910: fix out-of-bounds read on heap memory in cdp_decode","status":"published","published":"2025-09-24T15:50:07Z","modified":"2026-06-01T00:31:24.123199131Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CVE-2023-41910","description":"An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.","status":"published","published":"2023-09-05T00:00:00Z","modified":"2026-10-28T10:35:13.879913589Z","updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DLA-3578-1","title":"lldpd - security update","status":"published","published":"2023-09-22T00:00:00Z","modified":"2026-03-09T01:19:33.810974Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5505-1","title":"lldpd - security update","status":"published","published":"2023-09-25T00:00:00Z","modified":"2026-03-09T02:08:29.315731Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"openSUSE-SU-2026:12272-1","title":"liblldpctl4-1.0.23-1.1 on GA media","description":"These are all security issues fixed in the liblldpctl4-1.0.23-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-10-27T17:23:20.060498961Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"RLSA-2024:9158","title":"Moderate: lldpd security update","description":"LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices.\n\nSecurity Fix(es):\n\n* lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827)\n\n* lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612)\n\n* lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.","status":"published","published":"2025-03-17T20:16:49.937392Z","modified":"2026-02-05T07:30:11.672413Z","updated_at":"2026-11-02T15:53:24.923365Z"}]}}