CVE-2026-46433
lldpd: lldpd: Denial of Service due to heap buffer over-read when processing VLAN-tagged Ethernet frames
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 10, 2026
Updated · August 18, 2026
Description
A flaw was found in lldpd, an implementation of IEEE 802.1ab (LLDP). A remote attacker on the adjacent network can send specially crafted Ethernet frames with 802.1Q VLAN (Virtual Local Area Network) tags. This can cause a 4-byte heap buffer over-read, leading to a denial of service (DoS) due to an application crash. This vulnerability occurs when the received frame size equals the interface Maximum Transmission Unit (MTU).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-131 · Incorrect Calculation of Buffer Size