CVE catalog

CVE-2020-27827

lldpd: CVE-2020-27827

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.23% · Oct 25, 2026

A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlldpdsid1.0.23-1fixed
Debianlldpdforky1.0.22-1fixed
Debianlldpdtrixie1.0.18-1fixed
Debianlldpdbookworm1.0.16-1+deb12u1fixed
Debianlldpdbookworm-security1.0.16-1+deb12u1fixed
Debianopenvswitchsid4.0.0-2fixed
Debianopenvswitchforky4.0.0-2fixed
Debianopenvswitchtrixie3.5.0-1fixed
Debianopenvswitchbookworm3.1.0-2+deb12u1fixed
Debianopenvswitchbookworm-security3.1.0-2+deb12u1fixed
Suseopenvswitchopenstack cloud 72.5.11-25.26.1fixed
Suseopenvswitch-dpdkopenstack cloud 72.5.11-25.26.1fixed
Suseopenvswitchlinux enterprise server for sap applications 12 sp22.5.11-25.26.1fixed
Suseopenvswitch-dpdklinux enterprise server for sap applications 12 sp22.5.11-25.26.1fixed
Suseopenvswitchlinux enterprise server 12 sp2-ltss2.5.11-25.26.1fixed
Suseopenvswitch-dpdklinux enterprise server 12 sp2-ltss2.5.11-25.26.1fixed
Suseopenvswitchlinux enterprise server 12 sp2-bcl2.5.11-25.26.1fixed
Suseopenvswitch-dpdklinux enterprise server 12 sp2-bcl2.5.11-25.26.1fixed
Suseopenvswitchlinux enterprise module for package hub 15 sp22.11.5-3.12.1fixed
Suseopenvswitchlinux enterprise high performance computing 15 sp1-espos2.11.5-3.12.1fixed
Suseopenvswitchlinux enterprise high performance computing 15 sp1-ltss2.11.5-3.12.1fixed
Suseopenvswitchlinux enterprise server 15 sp1-bcl2.11.5-3.12.1fixed
Suseopenvswitchlinux enterprise server 15 sp1-ltss2.11.5-3.12.1fixed
Suseopenvswitchlinux enterprise server for sap applications 15 sp12.11.5-3.12.1fixed
Suseopenvswitchmanager proxy 4.02.11.5-3.12.1fixed
Suseopenvswitchmanager retail branch server 4.02.11.5-3.12.1fixed
Suseopenvswitchmanager server 4.02.11.5-3.12.1fixed
Suseopenvswitchenterprise storage 62.11.5-3.12.1fixed
Suseopenvswitchopenstack cloud 92.8.10-4.23.1fixed
Suseopenvswitchopenstack cloud crowbar 92.8.10-4.23.1fixed
Suseopenvswitchlinux enterprise server for sap applications 12 sp42.8.10-4.23.1fixed
Suseopenvswitchlinux enterprise server 12 sp4-ltss2.8.10-4.23.1fixed
Suseopenvswitchlinux enterprise module for package hub 15 sp22.13.2-9.11.1fixed
Suseopenvswitchlinux enterprise module for server applications 15 sp22.13.2-9.11.1fixed
Opensuseopenvswitchleap 15.22.13.2-lp152.3.9.1fixed
Suseopenvswitchlinux enterprise server 12 sp52.11.5-3.3.2fixed
Suseopenvswitchlinux enterprise server for sap applications 12 sp52.11.5-3.3.2fixed
Suseopenvswitchhpe helion openstack 82.7.12-3.36.1fixed
Suseopenvswitchopenstack cloud 82.7.12-3.36.1fixed
Suseopenvswitchopenstack cloud crowbar 82.7.12-3.36.1fixed
Suseopenvswitchlinux enterprise server for sap applications 12 sp32.7.12-3.36.1fixed
Suseopenvswitchlinux enterprise server 12 sp3-ltss2.7.12-3.36.1fixed
Suseopenvswitchlinux enterprise server 12 sp3-bcl2.7.12-3.36.1fixed
Suseopenvswitchenterprise storage 52.7.12-3.36.1fixed
Suseopenvswitchlinux enterprise high performance computing 15-espos2.11.5-6.30.2fixed
Suseopenvswitchlinux enterprise high performance computing 15-ltss2.11.5-6.30.2fixed
Suseopenvswitchlinux enterprise server 15-ltss2.11.5-6.30.2fixed
Suseopenvswitchlinux enterprise server for sap applications 152.11.5-6.30.2fixed
Opensuseopenvswitchtumbleweed2.14.2-11.3fixed
Ubuntuopenvswitch16.042.4.0-0ubuntu4vulnerable
Ubuntuopenvswitch16.042.4.0-0ubuntu5vulnerable
Ubuntuopenvswitch16.042.5.0~git20160129.46a88d9-0ubuntu1vulnerable
Ubuntuopenvswitch16.042.5.0~git20160219.522aca6-0ubuntu1vulnerable
Ubuntuopenvswitch16.042.5.0~git20160219.522aca6-0ubuntu2vulnerable
Ubuntuopenvswitch16.042.5.0~git20160219.522aca6-0ubuntu3vulnerable
Ubuntuopenvswitch16.042.5.0-0ubuntu1vulnerable
Ubuntuopenvswitch16.042.5.2-0ubuntu0.16.04.1vulnerable
Ubuntuopenvswitch16.042.5.2-0ubuntu0.16.04.2vulnerable
Ubuntuopenvswitch16.042.5.2-0ubuntu0.16.04.3vulnerable
Ubuntuopenvswitch16.042.5.4-0ubuntu0.16.04.1vulnerable
Ubuntuopenvswitch16.042.5.5-0ubuntu0.16.04.1vulnerable
Ubuntuopenvswitch16.042.5.5-0ubuntu0.16.04.2vulnerable
Ubuntuopenvswitch16.042.5.9-0ubuntu0.16.04.2fixed
Ubuntulldpd16.040.7.16-1vulnerable
Ubuntulldpd16.040.7.19-1vulnerable
Ubuntuopenvswitch18.042.8.0-0ubuntu2vulnerable
Ubuntuopenvswitch18.042.8.1-0ubuntu2vulnerable
Ubuntuopenvswitch18.042.8.1-0ubuntu3vulnerable
Ubuntuopenvswitch18.042.9.0~git20180205.5a39582ca-0ubuntu1vulnerable
Ubuntuopenvswitch18.042.9.0-0ubuntu1vulnerable
Ubuntuopenvswitch18.042.9.2-0ubuntu0.18.04.2vulnerable
Ubuntuopenvswitch18.042.9.2-0ubuntu0.18.04.3vulnerable
Ubuntuopenvswitch18.042.9.5-0ubuntu0.18.04.1vulnerable
Ubuntuopenvswitch18.042.9.7-0ubuntu0.18.04.2fixed
Ubuntulldpd18.040.9.8-1vulnerable
Ubuntulldpd18.040.9.9-1vulnerable
Ubuntulldpd18.040.9.9-1ubuntu0.1vulnerable
Ubuntuopenvswitch20.042.12.0-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.12.0-0ubuntu2vulnerable
Ubuntuopenvswitch20.042.12.1~git20191107.7accd1302-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.12.90~git20200107.af683565b-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.12.90~git20200107.af683565b-0ubuntu2vulnerable
Ubuntuopenvswitch20.042.12.90~git20200107.af683565b-0ubuntu3vulnerable
Ubuntuopenvswitch20.042.13.0~git20200127.dbdf66c29-0ubuntu2vulnerable
Ubuntuopenvswitch20.042.13.0~git20200212.15ae9db33-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.13.0~git20200212.15ae9db33-0ubuntu2vulnerable
Ubuntuopenvswitch20.042.13.0-0ubuntu1vulnerable
Ubuntuopenvswitch20.042.13.1-0ubuntu0.20.04.1vulnerable
Ubuntuopenvswitch20.042.13.1-0ubuntu0.20.04.3fixed
Ubuntulldpd20.041.0.4-1vulnerable
Ubuntulldpd20.041.0.4-1build1vulnerable
Ubuntulldpd20.041.0.4-1build2vulnerable
Ubuntulldpd22.041.0.11-1vulnerable
Ubuntulldpd22.041.0.12-1vulnerable
Ubuntulldpd22.041.0.13-1vulnerable
Ubuntulldpd24.041.0.17-1vulnerable
Ubuntulldpd24.041.0.18-1vulnerable
Ubuntulldpd24.041.0.18-1build1vulnerable
Ubuntulldpd24.041.0.18-1build3vulnerable
Ubuntulldpd24.041.0.18-1ubuntu0.1vulnerable
Ubuntulldpd25.101.0.18-1build3vulnerable
Ubuntulldpd25.101.0.18-1build4vulnerable
Ubuntulldpd26.101.0.19-1vulnerable
Ubuntulldpd26.101.0.22-1vulnerable
Ubuntulldpd26.101.0.22-1build1vulnerable
Ubuntulldpd26.041.0.18-1build4vulnerable
Ubuntulldpd26.041.0.19-1vulnerable
Ubuntulldpd26.041.0.19-1ubuntu0.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlldpdsourcesid1.0.8-1not yet assignedNot reportedNot reported
Debianlldpdsourceforky1.0.8-1not yet assignedNot reportedNot reported
Debianlldpdsourcetrixie1.0.8-1not yet assignedNot reportedNot reported
Debianlldpdsourcebookworm1.0.8-1not yet assignedNot reportedNot reported
Debianopenvswitchsourcesid2.15.0~git20210104.def6eb1ea+dfsg1-4not yet assignedNot reported[980132]
Debianopenvswitchsourceforky2.15.0~git20210104.def6eb1ea+dfsg1-4not yet assignedNot reported[980132]
Debianopenvswitchsourcetrixie2.15.0~git20210104.def6eb1ea+dfsg1-4not yet assignedNot reported[980132]
Debianopenvswitchsourcebookworm2.15.0~git20210104.def6eb1ea+dfsg1-4not yet assignedNot reported[980132]
Suseopenvswitchrpmopenstack cloud 72.5.11-25.26.1Not reportedSUSE-SU-2021:0298-1Not reported
Suseopenvswitch-dpdkrpmopenstack cloud 72.5.11-25.26.1Not reportedSUSE-SU-2021:0298-1Not reported
Suseopenvswitchrpmlinux enterprise server for sap applications 12 sp22.5.11-25.26.1Not reportedSUSE-SU-2021:0298-1Not reported
Suseopenvswitch-dpdkrpmlinux enterprise server for sap applications 12 sp22.5.11-25.26.1Not reportedSUSE-SU-2021:0298-1Not reported
Suseopenvswitchrpmlinux enterprise server 12 sp2-ltss2.5.11-25.26.1Not reportedSUSE-SU-2021:0298-1Not reported
Suseopenvswitch-dpdkrpmlinux enterprise server 12 sp2-ltss2.5.11-25.26.1Not reportedSUSE-SU-2021:0298-1Not reported
Suseopenvswitchrpmlinux enterprise server 12 sp2-bcl2.5.11-25.26.1Not reportedSUSE-SU-2021:0298-1Not reported
Suseopenvswitch-dpdkrpmlinux enterprise server 12 sp2-bcl2.5.11-25.26.1Not reportedSUSE-SU-2021:0298-1Not reported
Suseopenvswitchrpmlinux enterprise module for package hub 15 sp22.11.5-3.12.1Not reportedSUSE-SU-2021:0300-1Not reported
Suseopenvswitchrpmlinux enterprise high performance computing 15 sp1-espos2.11.5-3.12.1Not reportedSUSE-SU-2021:0300-1Not reported
Suseopenvswitchrpmlinux enterprise high performance computing 15 sp1-ltss2.11.5-3.12.1Not reportedSUSE-SU-2021:0300-1Not reported
Suseopenvswitchrpmlinux enterprise server 15 sp1-bcl2.11.5-3.12.1Not reportedSUSE-SU-2021:0300-1Not reported
Suseopenvswitchrpmlinux enterprise server 15 sp1-ltss2.11.5-3.12.1Not reportedSUSE-SU-2021:0300-1Not reported
Suseopenvswitchrpmlinux enterprise server for sap applications 15 sp12.11.5-3.12.1Not reportedSUSE-SU-2021:0300-1Not reported
Suseopenvswitchrpmmanager proxy 4.02.11.5-3.12.1Not reportedSUSE-SU-2021:0300-1Not reported
Suseopenvswitchrpmmanager retail branch server 4.02.11.5-3.12.1Not reportedSUSE-SU-2021:0300-1Not reported
Suseopenvswitchrpmmanager server 4.02.11.5-3.12.1Not reportedSUSE-SU-2021:0300-1Not reported
Suseopenvswitchrpmenterprise storage 62.11.5-3.12.1Not reportedSUSE-SU-2021:0300-1Not reported
Suseopenvswitchrpmopenstack cloud 92.8.10-4.23.1Not reportedSUSE-SU-2021:0297-1Not reported
Suseopenvswitchrpmopenstack cloud crowbar 92.8.10-4.23.1Not reportedSUSE-SU-2021:0297-1Not reported
Suseopenvswitchrpmlinux enterprise server for sap applications 12 sp42.8.10-4.23.1Not reportedSUSE-SU-2021:0297-1Not reported
Suseopenvswitchrpmlinux enterprise server 12 sp4-ltss2.8.10-4.23.1Not reportedSUSE-SU-2021:0297-1Not reported
Suseopenvswitchrpmlinux enterprise module for package hub 15 sp22.13.2-9.11.1Not reportedSUSE-SU-2021:0258-1Not reported
Suseopenvswitchrpmlinux enterprise module for server applications 15 sp22.13.2-9.11.1Not reportedSUSE-SU-2021:0258-1Not reported
Opensuseopenvswitchrpmleap 15.22.13.2-lp152.3.9.1Not reportedOPENSUSE-SU-2021:0239-1Not reported
Suseopenvswitchrpmlinux enterprise server 12 sp52.11.5-3.3.2Not reportedSUSE-SU-2021:0276-1Not reported
Suseopenvswitchrpmlinux enterprise server for sap applications 12 sp52.11.5-3.3.2Not reportedSUSE-SU-2021:0276-1Not reported
Suseopenvswitchrpmhpe helion openstack 82.7.12-3.36.1Not reportedSUSE-SU-2021:0284-1Not reported
Suseopenvswitchrpmopenstack cloud 82.7.12-3.36.1Not reportedSUSE-SU-2021:0284-1Not reported
Suseopenvswitchrpmopenstack cloud crowbar 82.7.12-3.36.1Not reportedSUSE-SU-2021:0284-1Not reported
Suseopenvswitchrpmlinux enterprise server for sap applications 12 sp32.7.12-3.36.1Not reportedSUSE-SU-2021:0284-1Not reported
Suseopenvswitchrpmlinux enterprise server 12 sp3-ltss2.7.12-3.36.1Not reportedSUSE-SU-2021:0284-1Not reported
Suseopenvswitchrpmlinux enterprise server 12 sp3-bcl2.7.12-3.36.1Not reportedSUSE-SU-2021:0284-1Not reported
Suseopenvswitchrpmenterprise storage 52.7.12-3.36.1Not reportedSUSE-SU-2021:0284-1Not reported
Suseopenvswitchrpmlinux enterprise high performance computing 15-espos2.11.5-6.30.2Not reportedSUSE-SU-2021:0277-1Not reported
Suseopenvswitchrpmlinux enterprise high performance computing 15-ltss2.11.5-6.30.2Not reportedSUSE-SU-2021:0277-1Not reported
Suseopenvswitchrpmlinux enterprise server 15-ltss2.11.5-6.30.2Not reportedSUSE-SU-2021:0277-1Not reported
Suseopenvswitchrpmlinux enterprise server for sap applications 152.11.5-6.30.2Not reportedSUSE-SU-2021:0277-1Not reported
Opensuseopenvswitchrpmtumbleweed2.14.2-11.3Not reportedOPENSUSE-SU-2024:11129-1Not reported
Ubuntuopenvswitchdeb16.042.5.9-0ubuntu0.16.04.2Not reportedUBUNTU-CVE-2020-27827Not reported
Ubuntuopenvswitchdeb18.042.9.7-0ubuntu0.18.04.2Not reportedUBUNTU-CVE-2020-27827Not reported
Ubuntuopenvswitchdeb20.042.13.1-0ubuntu0.20.04.3Not reportedUBUNTU-CVE-2020-27827Not reported

[Debian bug #980132]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • Source package: [openvswitch]

    Details (1)
    • 3.7.1-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • Source package: [openvswitch]

    Details (1)
    • 26.03.2-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • Source package: [openvswitch]

    Details (1)
    • 3.7.1-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • Source package: [openvswitch]

    Details (1)
    • 3.7.1-36.1 · noarch · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • Source package: [openvswitch]

    Details (1)
    • 3.7.1-36.1 · noarch · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • Source package: [openvswitch]

    Details (1)
    • 3.7.1-36.1 · noarch · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • Source package: [openvswitch]

    Details (1)
    • 3.7.1-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • Source package: [openvswitch]

    Details (1)
    • 3.7.1-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • [ovn]Unknown

    Source package: [openvswitch]

    Details (1)
    • 26.03.2-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • Source package: [openvswitch]

    Details (1)
    • 3.7.1-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • [ovn-central]Unknown

    Source package: [openvswitch]

    Details (1)
    • 26.03.2-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • [ovn-devel]Unknown

    Source package: [openvswitch]

    Details (1)
    • 26.03.2-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • [ovn-doc]Unknown

    Source package: [openvswitch]

    Details (1)
    • 26.03.2-36.1 · noarch · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • [ovn-docker]Unknown

    Source package: [openvswitch]

    Details (1)
    • 26.03.2-36.1 · noarch · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • [ovn-host]Unknown

    Source package: [openvswitch]

    Details (1)
    • 26.03.2-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • [ovn-vtep]Unknown

    Source package: [openvswitch]

    Details (1)
    • 26.03.2-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

  • Source package: [openvswitch]

    Details (1)
    • 3.7.1-36.1 · x86_64 · tumbleweed

      Unknown · Fixed: 2.14.2-11.3

      Version impact unknown

      dsa · openvswitch · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • Source package: [lldpd]

    Details (4)
    • 1.0.16-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.0.8-1

      dsa · lldpd · debian · bookworm; dsa · lldpd · debian · 12

    • 1.0.16-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.0.8-1

      dsa · lldpd · debian · bookworm; dsa · lldpd · debian · 12

    • 1.0.16-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 1.0.8-1

      dsa · lldpd · debian · bookworm; dsa · lldpd · debian · 12

    • 1.0.16-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 1.0.8-1

      dsa · lldpd · debian · bookworm; dsa · lldpd · debian · 12

  • [lldpd]Fixed
    Details (4)
    • 1.0.16-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.0.8-1

      dsa · lldpd · debian · bookworm; dsa · lldpd · debian · 12

    • 1.0.16-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.0.8-1

      dsa · lldpd · debian · bookworm; dsa · lldpd · debian · 12

    • 1.0.16-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 1.0.8-1

      dsa · lldpd · debian · bookworm; dsa · lldpd · debian · 12

    • 1.0.16-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 1.0.8-1

      dsa · lldpd · debian · bookworm; dsa · lldpd · debian · 12

  • Source package: [openvswitch]

    Details (4)
    • 3.1.0-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.15.0~git20210104.def6eb1ea+dfsg1-4

      dsa · openvswitch · debian · bookworm; dsa · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.15.0~git20210104.def6eb1ea+dfsg1-4

      dsa · openvswitch · debian · bookworm; dsa · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 2.15.0~git20210104.def6eb1ea+dfsg1-4

      dsa · openvswitch · debian · bookworm; dsa · openvswitch · debian · 12

    • 3.1.0-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 2.15.0~git20210104.def6eb1ea+dfsg1-4

      dsa · openvswitch · debian · bookworm; dsa · openvswitch · debian · 12

Next results

Observed:

References