{
  "id": "CVE-2021-43612",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2023-04-15T22:15:07.033",
  "lastModified": "2023-04-20T07:15:07.030",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via short SONMP packets."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/lldpd/lldpd/commit/73d42680fce8598324364dbb31b9bc3b8320adf7",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/lldpd/lldpd/compare/1.0.12...1.0.13",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3T5XHPOGIPWCRRPJUE6P3HVC5PTSD5JS/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JYA4AMJXCNF6UPFG36L2TPPT32C242SP/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SKQWHG2SZJZSGC7PXVDAEJYBN7ESDR7D/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://lldpd.github.io/security.html",
      "source": "cve@mitre.org"
    }
  ]
}