CVE-2015-8011

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.

• CWE-120

• http://www.openwall.com/lists/oss-security/2015/10/16/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/10/30/2Mailing List, Patch, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf
• https://github.com/vincentbernat/lldpd/commit/dd4f16e7e816f2165fba76e3d162cd8d2978dcb2Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/02/msg00032.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJ4DXFJWMZ325ECZXPZOSK7BOEDJZHPR/
• https://us-cert.cisa.gov/ics/advisories/icsa-21-194-07
• https://www.debian.org/security/2021/dsa-4836Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/10/16/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/10/30/2Mailing List, Patch, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf
• https://github.com/vincentbernat/lldpd/commit/dd4f16e7e816f2165fba76e3d162cd8d2978dcb2Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/02/msg00032.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJ4DXFJWMZ325ECZXPZOSK7BOEDJZHPR/
• https://us-cert.cisa.gov/ics/advisories/icsa-21-194-07
• https://www.debian.org/security/2021/dsa-4836Third Party Advisory

Published

Jan 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8005MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x b…
• CVE-2015-8006Cross-site scripting (XSS) vulnerability in the PageTriage t…
• CVE-2015-8007The Echo extension for MediWiki does not properly implement …
• CVE-2015-8008The OAuth extension for MediaWiki improperly negotiates a ne…
• CVE-2015-8009The MWOAuthDataStore::lookup_token function in Extension:OAu…
• CVE-2015-8010Cross-site scripting (XSS) vulnerability in the Classic-UI w…
• CVE-2015-8012lldpd before 0.8.0 allows remote attackers to cause a denial…7.5
• CVE-2015-8013s2k.js in OpenPGP.js will decrypt arbitrary messages regardl…
• CVE-2015-8019The skb_copy_and_csum_datagram_iovec function in net/core/da…
• CVE-2015-8020Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain …
• CVE-2015-8021Incomplete blacklist vulnerability in the Configuration util…
• CVE-2015-8022The Configuration utility in F5 BIG-IP LTM, Analytics, APM, …