Lldpd Project

Lldpd is a lightweight link-layer discovery protocol daemon widely embedded in network switches, routers, and other infrastructure devices, where it handles parsing of untrusted network packets at a protocol parsing layer. Vulnerabilities in this vendor skew strongly toward critical-severity outcomes and cluster around memory-safety weaknesses including out-of-bounds reads and writes, buffer overflows, and resource-exhaustion flaws that are characteristic of C-based network parsers handling low-level frame data. Defenders should treat this vendor's advisories as high-priority for any switch or router fleet that runs the service, as the proximity to the data plane and the parsing complexity of link-layer protocols create sustained exposure to serious flaws; live severity and exploitation counts are shown alongside this summary.