CVE-2015-8012 lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet.

HighCVSS 7.5 EPSS 3.0%

Published: 2020-01-28 20:15
Updated: 2026-09-09 10:01
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet.

Affected products

Product	Affected versions	Fixed in
debian/lldpd(Debian:12)	< 0.7.19-1	0.7.19-1
debian/lldpd(Debian:13)	< 0.7.19-1	0.7.19-1
debian/lldpd(Debian:14)	< 0.7.19-1	0.7.19-1
lldpd project lldpd	< 0.8.0	0.8.0

References

Debian Security Tracker CVE-2015-8012 vendor-advisory
www.openwall.com mailing-list patch third-party-advisory
www.openwall.com mailing-list patch third-party-advisory
github.com patch third-party-advisory
github.com patch third-party-advisory

CVSS v3.1

7.5 High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

All scores (3)

v3.1 7.5 · nvd@nist.gov
v3.1 7.5 · osv:debian
v2.0 5.0 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.00% (percentile 87.6)
CWE: CWE-617

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.