https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:32:06.958925+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:9158 ALSA-2024:9158 — Moderate: lldpd security update 2026-10-03T22:32:07.366401+00:00

Affected: AlmaLinux:9: lldpd, AlmaLinux:9: lldpd-devel

LLDP is an industry standard protocol designed to supplant proprietary Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver Link-Layer notifications to adjacent network devices.

Security Fix(es):

* lldp/openvswitch: denial of service via externally triggered memory leak (CVE-2020-27827) * lldpd: out-of-bounds read when decoding SONMP packets (CVE-2021-43612) * lldpd: CDP PDU Packet cdp.c out-of-bounds read (CVE-2023-41910)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-01805 bdu:2021-01805 2026-10-03T22:32:07.366468+00:00 bdu:2021-01805 https://cve.radiocsirt.org/vuln/certfr-2021-avi-518 certfr-2021-avi-518 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-03T22:32:07.366485+00:00 certfr-2021-avi-518 https://cve.radiocsirt.org/vuln/euvd-2026-262443 EUVD-2026-262443 2026-10-03T22:32:07.366501+00:00 EUVD-2026-262443 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27827 fkie_cve-2020-27827 2026-10-03T22:32:07.366512+00:00

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/ghsa-m3mq-x6x3-4537 GHSA-m3mq-x6x3-4537 2026-10-03T22:32:07.366533+00:00

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/gsd-2020-27827 gsd-2020-27827 2026-10-03T22:32:07.366547+00:00 gsd-2020-27827 https://cve.radiocsirt.org/vuln/icsa-21-194-07 ICSA-21-194-07 — Siemens Industrial Products LLDP (Update D) 2026-10-03T22:32:07.366557+00:00

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service.

 https://cve.radiocsirt.org/vuln/msrc_cve-2020-27827 msrc_CVE-2020-27827 — A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when a… 2026-10-03T22:32:07.366576+00:00 msrc_CVE-2020-27827 https://cve.radiocsirt.org/vuln/oesa-2021-1179 OESA-2021-1179 — openvswitch security update 2026-10-03T22:32:07.366592+00:00

Affected: openEuler:20.03-LTS-SP1: openvswitch

Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license. Security Fix(es): A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2020-35498) A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.(CVE-2020-27827) Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.(CVE-2015-8011)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0239-1 openSUSE-SU-2021:0239-1 — Security update for openvswitch 2026-10-03T22:32:07.366616+00:00

Security update for openvswitch

 https://cve.radiocsirt.org/vuln/rhsa-2021:0497 RHSA-2021:0497 — Red Hat Security Advisory: openvswitch2.13 security and bug fix update 2026-10-03T22:32:07.366631+00:00

lldp/openvswitch: denial of service via externally triggered memory leak openvswitch: limitation in the OVS packet parsing in userspace leads to DoS

 https://cve.radiocsirt.org/vuln/suse-su-2021:0258-1 SUSE-SU-2021:0258-1 — Security update for openvswitch 2026-10-03T22:32:07.366647+00:00

Security update for openvswitch

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-27827 UBUNTU-CVE-2020-27827 2026-10-03T22:32:07.366661+00:00

Affected: Ubuntu:16.04:LTS: openvswitch, Ubuntu:16.04:LTS: lldpd, Ubuntu:18.04:LTS: openvswitch, Ubuntu:18.04:LTS: lldpd, Ubuntu:20.04:LTS: openvswitch, Ubuntu:20.04:LTS: lldpd, Ubuntu:22.04:LTS: lldpd, Ubuntu:24.04:LTS: lldpd, Ubuntu:25.10: lldpd, Ubuntu:26.04:LTS: lldpd

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0916 WID-SEC-W-2023-0916 — Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T22:32:07.366691+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux und SUSE Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.