CVE-2020-27827

Name	CVE-2020-27827
Description	A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-2571-1, DLA-3389-1, DSA-4836-1
Debian Bugs	980132

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
lldpd (PTS)	buster	1.0.3-1	vulnerable
	buster (security)	1.0.3-1+deb10u2	fixed
	bullseye (security), bullseye	1.0.11-1+deb11u2	fixed
	bookworm, bookworm (security)	1.0.16-1+deb12u1	fixed
	sid, trixie	1.0.18-1	fixed
openvswitch (PTS)	buster	2.10.7+ds1-0+deb10u1	fixed
	buster (security)	2.10.7+ds1-0+deb10u5	fixed
	bullseye	2.15.0+ds1-2+deb11u4	fixed
	bullseye (security)	2.15.0+ds1-2+deb11u5	fixed
	bookworm	3.1.0-2	fixed
	bookworm (security)	3.1.0-2+deb12u1	fixed
	trixie	3.3.0~git20240118.e802fe7-3	fixed
	sid	3.3.0-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
lldpd	source	buster	1.0.3-1+deb10u1	DLA-3389-1
lldpd	source	(unstable)	1.0.8-1
openvswitch	source	stretch	2.6.10-0+deb9u1	DLA-2571-1
openvswitch	source	buster	2.10.6+ds1-0+deb10u1	DSA-4836-1
openvswitch	source	(unstable)	2.15.0~git20210104.def6eb1ea+dfsg1-4		980132

Notes

[stretch] - lldpd <no-dsa> (Minor issue)
https://github.com/openvswitch/ovs/pull/337
https://github.com/lldpd/lldpd/commit/a8d3c90feca548fc0656d95b5d278713db86ff61
https://mail.openvswitch.org/pipermail/ovs-announce/2021-January/000269.html
https://github.com/openvswitch/ovs/commit/78e712c0b1dacc2f12d2a03d98f083d8672867f0