Launchpad CVE tracker

CVE 2015-8011

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.

Related bugs and status

CVE-2015-8011 (Candidate) is related to these bugs:

Bug #1737866: Too many open files when large number of routers on a host

		In	Importance	Status
1737866	Too many open files when large number of routers on a host	OpenStack Neutron Open vSwitch Charm	Undecided	Invalid
1737866	Too many open files when large number of routers on a host	openvswitch (Ubuntu)	Medium	Fix Released
1737866	Too many open files when large number of routers on a host	openvswitch (Ubuntu Bionic)	Medium	Fix Released
1737866	Too many open files when large number of routers on a host	openvswitch (Ubuntu Artful)	Medium	Won't Fix
1737866	Too many open files when large number of routers on a host	openvswitch (Ubuntu Xenial)	Medium	Fix Released
1737866	Too many open files when large number of routers on a host	Ubuntu Cloud Archive	Undecided	Fix Released
1737866	Too many open files when large number of routers on a host	Ubuntu Cloud Archive mitaka	Medium	Fix Committed
1737866	Too many open files when large number of routers on a host	Ubuntu Cloud Archive ocata	Medium	Fix Released
1737866	Too many open files when large number of routers on a host	Ubuntu Cloud Archive pike	Medium	Fix Released

Bug #1823295: openvswitch-switch package upgrades restart daemons multiple times

		In	Importance	Status
1823295	openvswitch-switch package upgrades restart daemons multiple times	openvswitch (Ubuntu)	High	Fix Released
1823295	openvswitch-switch package upgrades restart daemons multiple times	openvswitch (Ubuntu Disco)	High	Fix Released
1823295	openvswitch-switch package upgrades restart daemons multiple times	openvswitch (Ubuntu Bionic)	High	Fix Released
1823295	openvswitch-switch package upgrades restart daemons multiple times	openvswitch (Ubuntu Cosmic)	High	Won't Fix

Bug #1836713: upgrade of openvswitch packages resets alternative binaries to auto

		In	Importance	Status
1836713	upgrade of openvswitch packages resets alternative binaries to auto	openvswitch (Ubuntu)	High	Fix Released
1836713	upgrade of openvswitch packages resets alternative binaries to auto	openvswitch (Ubuntu Bionic)	High	Fix Released
1836713	upgrade of openvswitch packages resets alternative binaries to auto	openvswitch (Ubuntu Eoan)	High	Fix Released
1836713	upgrade of openvswitch packages resets alternative binaries to auto	openvswitch (Ubuntu Disco)	High	Won't Fix
1836713	upgrade of openvswitch packages resets alternative binaries to auto	Ubuntu Cloud Archive	Undecided	Fix Released
1836713	upgrade of openvswitch packages resets alternative binaries to auto	Ubuntu Cloud Archive train	Undecided	Fix Released
1836713	upgrade of openvswitch packages resets alternative binaries to auto	Ubuntu Cloud Archive queens	Undecided	Fix Released
1836713	upgrade of openvswitch packages resets alternative binaries to auto	Ubuntu Cloud Archive stein	Undecided	Fix Released

Bug #1881077: [SRU] openvswitch 2.9.7

		In	Importance	Status
1881077	[SRU] openvswitch 2.9.7	openvswitch (Ubuntu)	Undecided	Invalid
1881077	[SRU] openvswitch 2.9.7	openvswitch (Ubuntu Bionic)	Medium	Fix Released
1881077	[SRU] openvswitch 2.9.7	Ubuntu Cloud Archive	Undecided	Invalid
1881077	[SRU] openvswitch 2.9.7	Ubuntu Cloud Archive queens	Medium	Fix Released

Bug #1888198: [SRU] opevnswitch 2.5.9

		In	Importance	Status
1888198	[SRU] opevnswitch 2.5.9	openvswitch (Ubuntu)	Medium	Fix Released
1888198	[SRU] opevnswitch 2.5.9	openvswitch (Ubuntu Xenial)	Medium	Fix Released
1888198	[SRU] opevnswitch 2.5.9	Ubuntu Cloud Archive	Undecided	Fix Released
1888198	[SRU] opevnswitch 2.5.9	Ubuntu Cloud Archive mitaka	Medium	Fix Committed

Bug #1906280: [SRU] Add support for disabling mlockall() calls in ovs-vswitchd

		In	Importance	Status
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	charm-ovn-chassis	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	OpenStack Neutron Open vSwitch Charm	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	openvswitch (Ubuntu)	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	openvswitch (Ubuntu Hirsute)	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	openvswitch (Ubuntu Focal)	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	openvswitch (Ubuntu Bionic)	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	Ubuntu Cloud Archive	Undecided	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	Ubuntu Cloud Archive ussuri	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	Ubuntu Cloud Archive train	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	Ubuntu Cloud Archive stein	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	Ubuntu Cloud Archive queens	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	openvswitch (Ubuntu Groovy)	Critical	Fix Released
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	OpenStack Neutron Gateway Charm	Undecided	New
1906280	[SRU] Add support for disabling mlockall() calls in ovs-vswitchd	charm-ovn-dedicated-chassis	Critical	Fix Released

Bug #1907686: ovn: instance unable to retrieve metadata

		In	Importance	Status
1907686	ovn: instance unable to retrieve metadata	charm-ovn-chassis	Undecided	Invalid
1907686	ovn: instance unable to retrieve metadata	neutron	Undecided	Invalid
1907686	ovn: instance unable to retrieve metadata	openvswitch (Ubuntu)	High	Fix Released
1907686	ovn: instance unable to retrieve metadata	openvswitch (Ubuntu Hirsute)	High	Fix Released
1907686	ovn: instance unable to retrieve metadata	openvswitch (Ubuntu Groovy)	High	Fix Released
1907686	ovn: instance unable to retrieve metadata	openvswitch (Ubuntu Focal)	High	Fix Released
1907686	ovn: instance unable to retrieve metadata	Ubuntu Cloud Archive	Undecided	Fix Released
1907686	ovn: instance unable to retrieve metadata	Ubuntu Cloud Archive ussuri	Undecided	Fix Released
1907686	ovn: instance unable to retrieve metadata	Ubuntu Cloud Archive victoria	Undecided	Won't Fix
1907686	ovn: instance unable to retrieve metadata	Ubuntu Cloud Archive wallaby	Undecided	Fix Released

Bug #1910608: openvswitch embedded code copy of lldpd is vulnerable to CVE-2015-8011

Summary				In	Importance	Status
	1910608	openvswitch embedded code copy of lldpd is vulnerable to CVE-2015-8011		openvswitch (Ubuntu)	Undecided	Fix Released

Bug #1912201: [SRU] openvswitch 2.9.8

		In	Importance	Status
1912201	[SRU] openvswitch 2.9.8	Ubuntu Cloud Archive	Undecided	Invalid
1912201	[SRU] openvswitch 2.9.8	Ubuntu Cloud Archive queens	Medium	Fix Released
1912201	[SRU] openvswitch 2.9.8	openvswitch (Ubuntu)	Undecided	Fix Released
1912201	[SRU] openvswitch 2.9.8	openvswitch (Ubuntu Bionic)	Medium	Fix Released

Bug #1912225: [SRU] openvswitch 2.11.5

Summary				In	Importance	Status
	1912225	[SRU] openvswitch 2.11.5		Ubuntu Cloud Archive	Undecided	Invalid
	1912225	[SRU] openvswitch 2.11.5		Ubuntu Cloud Archive stein	High	Fix Released

Bug #1915829: FQDN / hostname recorded in OVSDB is unreliable

		In	Importance	Status
1915829	FQDN / hostname recorded in OVSDB is unreliable	openvswitch (Ubuntu)	High	Fix Released
1915829	FQDN / hostname recorded in OVSDB is unreliable	openvswitch (Ubuntu Focal)	High	Fix Released
1915829	FQDN / hostname recorded in OVSDB is unreliable	openvswitch (Ubuntu Groovy)	High	Fix Released
1915829	FQDN / hostname recorded in OVSDB is unreliable	openvswitch (Ubuntu Hirsute)	High	Fix Released
1915829	FQDN / hostname recorded in OVSDB is unreliable	Ubuntu Cloud Archive	High	Fix Released
1915829	FQDN / hostname recorded in OVSDB is unreliable	Ubuntu Cloud Archive ussuri	High	Fix Released
1915829	FQDN / hostname recorded in OVSDB is unreliable	Ubuntu Cloud Archive wallaby	High	Fix Released
1915829	FQDN / hostname recorded in OVSDB is unreliable	Ubuntu Cloud Archive victoria	High	Invalid

Bug #1920141: [SRU] openvswitch 2.13.3 / linking changes in DPDK 19.11.x

		In	Importance	Status
1920141	[SRU] openvswitch 2.13.3 / linking changes in DPDK 19.11.x	openvswitch (Ubuntu)	Undecided	Invalid
1920141	[SRU] openvswitch 2.13.3 / linking changes in DPDK 19.11.x	openvswitch (Ubuntu Groovy)	High	Fix Released
1920141	[SRU] openvswitch 2.13.3 / linking changes in DPDK 19.11.x	openvswitch (Ubuntu Focal)	High	Fix Released
1920141	[SRU] openvswitch 2.13.3 / linking changes in DPDK 19.11.x	dpdk (Ubuntu)	Undecided	Fix Released
1920141	[SRU] openvswitch 2.13.3 / linking changes in DPDK 19.11.x	dpdk (Ubuntu Focal)	High	Fix Released
1920141	[SRU] openvswitch 2.13.3 / linking changes in DPDK 19.11.x	dpdk (Ubuntu Groovy)	High	Fix Released
1920141	[SRU] openvswitch 2.13.3 / linking changes in DPDK 19.11.x	Ubuntu Cloud Archive	Undecided	Invalid
1920141	[SRU] openvswitch 2.13.3 / linking changes in DPDK 19.11.x	Ubuntu Cloud Archive ussuri	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2015-8011

References