CVE-2015-8011 · cross-distro fix matrix

CVE-2015-8011: Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.

Affects 8 Linux releases across 11 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2015-8011 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

lldpd→ fixed in0.7.19-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y lldpd
```
openvswitch→ fixed in2.15.0~git20210104.def6eb1ea+dfsg1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y openvswitch
```

Source: Debian Security Tracker

lldpd→ fixed in0.7.19-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y lldpd
```
openvswitch→ fixed in2.15.0~git20210104.def6eb1ea+dfsg1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y openvswitch
```

Source: Debian Security Tracker

lldpd→ fixed in0.7.19-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y lldpd
```
openvswitch→ fixed in2.15.0~git20210104.def6eb1ea+dfsg1-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y openvswitch
```