CVE-2021-43612: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets.

Affected products

• Fedoraproject Fedora: version 36 only; version 37 only; version 38 only
• Lldpd Project Lldpd: before 1.0.13 (fixed in 1.0.13)

Published 2023-04-15. Last modified 2026-06-17.