Catálogo de CVE

CVE-2026-46433

lldpd is an implementation of IEEE 802.1ab (LLDP)…

lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips 802.1Q VLAN tags from received Ethernet frames by calling memmove() to shift the frame payload 4 bytes left. The third argument (byte count) is s - 2 * ETHER_ADDR_LEN but should be s - 2 * ETHER_ADDR_LEN - 4, causing a 4-byte heap buffer over-read past the malloc(h_mtu) allocation when the received frame size equals the interface MTU. This issue has been patched in version 1.0.22.

Gravedad: Medium · CVSS 6.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: May 16, 2026, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.22% · Oct 27, 2026

Projects and upstream resources

[lldpd][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiansid	lldpd	`1.0.22-1`	FixedDistribution-reported fixed boundary	[CVE-2026-46433]
Debiansid	lldpd	`1.0.23-1`	Fixed	[CVE-2026-46433]
Debianforky	lldpd	`1.0.22-1`	FixedDistribution-reported fixed boundary	[CVE-2026-46433]

Showing 3 fix observations. All 124 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	lldpd	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	lldpd	`1.0.22`	UnknownSource applicability is not established	Provider not reported
Debianbookworm	lldpd	Not reported	AffectedDistribution reports no fix	[CVE-2026-46433]
Debianbookworm	lldpd	`1.0.16-1+deb12u1`	Affected	[CVE-2026-46433]
Debianbookworm-security	lldpd	`1.0.16-1+deb12u1`	Affected	[CVE-2026-46433]
Debianforky	lldpd	`1.0.22-1`	FixedDistribution-reported fixed boundary	[CVE-2026-46433]
Debiansid	lldpd	`1.0.22-1`	FixedDistribution-reported fixed boundary	[CVE-2026-46433]
Debiansid	lldpd	`1.0.23-1`	Fixed	[CVE-2026-46433]
Debiantrixie	lldpd	Not reported	AffectedDistribution reports no fix	[CVE-2026-46433]
Debiantrixie	lldpd	`1.0.18-1`	Affected	[CVE-2026-46433]
Opensuseleap 16.0	lldpd	`1.0.22-bp160.1.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2026:21146-1]Jun 30, 2026, 6:24:45 PM UTC
Opensusetumbleweed	lldpd	`1.0.22-1.1`	UnknownSource applicability is not established	[OPENSUSE-SU-2026:10794-1]May 17, 2026, 2:18:08 PM UTC
Ubuntu16.04	lldpd	`0.7.16-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu16.04	lldpd	`0.7.19-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu18.04	lldpd	`0.9.8-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu18.04	lldpd	`0.9.9-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu18.04	lldpd	`0.9.9-1ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	lldpd	`1.0.4-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	lldpd	`1.0.4-1build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	lldpd	`1.0.4-1build2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.12.0-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.12.0-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.12.1~git20191107.7accd1302-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.12.90~git20200107.af683565b-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.12.90~git20200107.af683565b-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.12.90~git20200107.af683565b-0ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.0-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.0~git20200127.dbdf66c29-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.0~git20200212.15ae9db33-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.0~git20200212.15ae9db33-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.1-0ubuntu0.20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.1-0ubuntu0.20.04.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.1-0ubuntu0.20.04.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.3-0ubuntu0.20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.3-0ubuntu0.20.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.5-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.8-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.8-0ubuntu1.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.8-0ubuntu1.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.8-0ubuntu1.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu20.04	openvswitch	`2.13.8-0ubuntu1.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	lldpd	`1.0.11-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	lldpd	`1.0.12-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	lldpd	`1.0.13-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.16.0-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.16.0-0ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.16.0-0ubuntu4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.0-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.0~git20220105.0d1ffb7-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.0~git20220118.1b9fd88-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.0~git20220121.109d024-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.12-0ubuntu0.22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.2-0ubuntu0.22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.2-0ubuntu0.22.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.3-0ubuntu0.22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.3-0ubuntu0.22.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.5-0ubuntu0.22.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.7-0ubuntu0.22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.8-0ubuntu0.22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.9-0ubuntu0.22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu22.04	openvswitch	`2.17.9-0ubuntu0.22.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	lldpd	`1.0.17-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	lldpd	`1.0.18-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	lldpd	`1.0.18-1build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	lldpd	`1.0.18-1build3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	lldpd	`1.0.18-1ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.2.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.2.0-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.2.0-2build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.2.2~git20231029-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.2.2~git20231029-2build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.0-1build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.0-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.0-1ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.0-1ubuntu3.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.0-1ubuntu3.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.0~git20240118.e802fe7-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.0~git20240118.e802fe7-3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.4-0ubuntu0.24.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.4-0ubuntu0.24.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu24.04	openvswitch	`3.3.9-0ubuntu0.24.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu25.10	lldpd	`1.0.18-1build3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu25.10	lldpd	`1.0.18-1build4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu25.10	openvswitch	`3.5.0-1build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu25.10	openvswitch	`3.5.1-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu25.10	openvswitch	`3.6.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu25.10	openvswitch	`3.6.0-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu25.10	openvswitch	`3.6.0-2ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	lldpd	`1.0.18-1build4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	lldpd	`1.0.19-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	lldpd	`1.0.19-1ubuntu0.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.6.0-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.6.0-2build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.6.0-5`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.6.0-6`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.6.0-6build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.6.0-6ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.7.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.7.0-1build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.7.0~git20260211.8c6ebf8-1~1.gbp9127d1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.7.1-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.04	openvswitch	`3.7.1-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.10	lldpd	`1.0.19-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.10	lldpd	`1.0.22-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.10	lldpd	`1.0.22-1build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.10	openvswitch	`3.7.1-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.10	openvswitch	`3.7.1-3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.10	openvswitch	`3.7.1-3build1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntu26.10	openvswitch	`4.0.0-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.8.0-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.8.1-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.8.1-0ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.0-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.0~git20180205.5a39582ca-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.2-0ubuntu0.18.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.2-0ubuntu0.18.04.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.5-0ubuntu0.18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.7-0ubuntu0.18.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.8-0ubuntu0.18.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.8-0ubuntu0.18.04.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.8-0ubuntu0.18.04.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.8-0ubuntu0.18.04.5`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC
Ubuntupro	openvswitch	`2.9.8-0ubuntu0.18.04.5+esm1`	UnknownSource applicability is not established	[UBUNTU-CVE-2026-46433]Oct 21, 2026, 10:16:13 AM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "lldpd",
      "status": "fixed",
      "release": "sid",
      "version": "1.0.23-1"
    },
    {
      "name": "lldpd",
      "status": "fixed",
      "release": "forky",
      "version": "1.0.22-1"
    },
    {
      "name": "lldpd",
      "status": "vulnerable",
      "release": "trixie",
      "version": "1.0.18-1"
    },
    {
      "name": "lldpd",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "1.0.16-1+deb12u1"
    },
    {
      "name": "lldpd",
      "status": "vulnerable",
      "release": "bookworm-security",
      "version": "1.0.16-1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "lldpd",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "1.0.22-1"
    },
    {
      "bug": null,
      "name": "lldpd",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "1.0.22-1"
    },
    {
      "bug": null,
      "name": "lldpd",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "lldpd",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "lldpd",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "fixed_version": "1.0.22",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.22-bp160.1.1"
            }
          ]
        }
      ],
      "release": "leap 16.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:21146-1",
      "fixed_version": "1.0.22-bp160.1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2026:21146-1",
      "provider_updated_at": "2026-06-30T18:24:45.576327368Z",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.22-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:10794-1",
      "fixed_version": "1.0.22-1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2026:10794-1",
      "provider_updated_at": "2026-05-17T14:18:08.451662Z",
      "applicability_unknown": true
    },
    {
      "name": "openvswitch",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2.8.0-0ubuntu2",
        "2.8.1-0ubuntu2",
        "2.8.1-0ubuntu3",
        "2.9.0~git20180205.5a39582ca-0ubuntu1",
        "2.9.0-0ubuntu1",
        "2.9.2-0ubuntu0.18.04.2",
        "2.9.2-0ubuntu0.18.04.3",
        "2.9.5-0ubuntu0.18.04.1",
        "2.9.7-0ubuntu0.18.04.2",
        "2.9.8-0ubuntu0.18.04.2",
        "2.9.8-0ubuntu0.18.04.3",
        "2.9.8-0ubuntu0.18.04.4",
        "2.9.8-0ubuntu0.18.04.5",
        "2.9.8-0ubuntu0.18.04.5+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "0.7.16-1",
        "0.7.19-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "0.9.8-1",
        "0.9.9-1",
        "0.9.9-1ubuntu0.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "openvswitch",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.12.0-0ubuntu1",
        "2.12.0-0ubuntu2",
        "2.12.1~git20191107.7accd1302-0ubuntu1",
        "2.12.90~git20200107.af683565b-0ubuntu1",
        "2.12.90~git20200107.af683565b-0ubuntu2",
        "2.12.90~git20200107.af683565b-0ubuntu3",
        "2.13.0~git20200127.dbdf66c29-0ubuntu2",
        "2.13.0~git20200212.15ae9db33-0ubuntu1",
        "2.13.0~git20200212.15ae9db33-0ubuntu2",
        "2.13.0-0ubuntu1",
        "2.13.1-0ubuntu0.20.04.1",
        "2.13.1-0ubuntu0.20.04.3",
        "2.13.1-0ubuntu0.20.04.4",
        "2.13.3-0ubuntu0.20.04.1",
        "2.13.3-0ubuntu0.20.04.2",
        "2.13.5-0ubuntu1",
        "2.13.8-0ubuntu1",
        "2.13.8-0ubuntu1.1",
        "2.13.8-0ubuntu1.2",
        "2.13.8-0ubuntu1.3",
        "2.13.8-0ubuntu1.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "1.0.4-1",
        "1.0.4-1build1",
        "1.0.4-1build2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "1.0.11-1",
        "1.0.12-1",
        "1.0.13-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "openvswitch",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2.16.0-0ubuntu2",
        "2.16.0-0ubuntu3",
        "2.16.0-0ubuntu4",
        "2.17.0~git20220105.0d1ffb7-0ubuntu1",
        "2.17.0~git20220118.1b9fd88-0ubuntu1",
        "2.17.0~git20220121.109d024-0ubuntu1",
        "2.17.0-0ubuntu1",
        "2.17.2-0ubuntu0.22.04.1",
        "2.17.2-0ubuntu0.22.04.2",
        "2.17.3-0ubuntu0.22.04.1",
        "2.17.3-0ubuntu0.22.04.2",
        "2.17.5-0ubuntu0.22.04.2",
        "2.17.7-0ubuntu0.22.04.1",
        "2.17.8-0ubuntu0.22.04.1",
        "2.17.9-0ubuntu0.22.04.1",
        "2.17.9-0ubuntu0.22.04.2",
        "2.17.12-0ubuntu0.22.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "1.0.17-1",
        "1.0.18-1",
        "1.0.18-1build1",
        "1.0.18-1build3",
        "1.0.18-1ubuntu0.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "openvswitch",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "3.2.0-1",
        "3.2.0-2",
        "3.2.0-2build1",
        "3.2.2~git20231029-2",
        "3.2.2~git20231029-2build1",
        "3.3.0~git20240118.e802fe7-2",
        "3.3.0~git20240118.e802fe7-3",
        "3.3.0-1",
        "3.3.0-1build1",
        "3.3.0-1ubuntu1",
        "3.3.0-1ubuntu3",
        "3.3.0-1ubuntu3.1",
        "3.3.0-1ubuntu3.2",
        "3.3.4-0ubuntu0.24.04.1",
        "3.3.4-0ubuntu0.24.04.2",
        "3.3.9-0ubuntu0.24.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "1.0.18-1build3",
        "1.0.18-1build4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "openvswitch",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "3.5.0-1build1",
        "3.5.1-0ubuntu1",
        "3.6.0-1",
        "3.6.0-2",
        "3.6.0-2ubuntu0.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "26.10",
      "versions": [
        "1.0.19-1",
        "1.0.22-1",
        "1.0.22-1build1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "openvswitch",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "26.10",
      "versions": [
        "3.7.1-2",
        "3.7.1-3",
        "3.7.1-3build1",
        "4.0.0-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "lldpd",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "1.0.18-1build4",
        "1.0.19-1",
        "1.0.19-1ubuntu0.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    },
    {
      "name": "openvswitch",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "3.6.0-2",
        "3.6.0-2build1",
        "3.6.0-5",
        "3.6.0-6",
        "3.6.0-6build1",
        "3.6.0-6ubuntu2",
        "3.7.0~git20260211.8c6ebf8-1~1.gbp9127d1",
        "3.7.0-1",
        "3.7.0-1build1",
        "3.7.1-1",
        "3.7.1-2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-46433",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-46433",
      "provider_updated_at": "2026-10-21T10:16:13.943224328Z",
      "applicability_unknown": true
    }
  ]
}

Publisher notes

[trixie] lldpd: Minor issue [bookworm] lldpd: Minor issue

OpenFactory catalog packages

La asociación de paquetes está en curso.

[Debian 12 (Bookworm)]

[liblldpctl-dev]Desconocido
Paquete fuente: [lldpd]
Detalles (4)
- 1.0.16-1+deb12u1 · amd64 · bookworm
  Afectada
  nvd · lldpd · debian · bookworm; nvd · lldpd · debian · 12
- 1.0.16-1+deb12u1 · arm64 · bookworm
  Afectada
  nvd · lldpd · debian · bookworm; nvd · lldpd · debian · 12
- 1.0.16-1+deb12u1 · amd64 · bookworm-security
  Afectada
  nvd · lldpd · debian · bookworm; nvd · lldpd · debian · 12
- 1.0.16-1+deb12u1 · arm64 · bookworm-security
  Afectada
  nvd · lldpd · debian · bookworm; nvd · lldpd · debian · 12
[lldpd]Desconocido
Detalles (4)
- 1.0.16-1+deb12u1 · amd64 · bookworm
  Afectada
  nvd · lldpd · debian · bookworm; nvd · lldpd · debian · 12
- 1.0.16-1+deb12u1 · arm64 · bookworm
  Afectada
  nvd · lldpd · debian · bookworm; nvd · lldpd · debian · 12
- 1.0.16-1+deb12u1 · amd64 · bookworm-security
  Afectada
  nvd · lldpd · debian · bookworm; nvd · lldpd · debian · 12
- 1.0.16-1+deb12u1 · arm64 · bookworm-security
  Afectada
  nvd · lldpd · debian · bookworm; nvd · lldpd · debian · 12

[Debian 13 (Trixie)]

[liblldpctl-dev]Desconocido
Paquete fuente: [lldpd]
Detalles (2)
- 1.0.18-1+b1 · amd64 · trixie
  Afectada
  nvd · lldpd · debian · 13
- 1.0.18-1+b2 · arm64 · trixie
  Afectada
  nvd · lldpd · debian · 13
[lldpd]Desconocido
Paquete fuente: [lldpd]
Detalles (2)
- 1.0.18-1+b1 · amd64 · trixie
  Afectada
  nvd · lldpd · debian · 13
- 1.0.18-1+b2 · arm64 · trixie
  Afectada
  nvd · lldpd · debian · 13

[openSUSE Tumbleweed]

[liblldpctl4]Desconocido
Paquete fuente: [lldpd]
Detalles (1)
- 1.0.22-2.3 · x86_64 · tumbleweed
  Desconocido · Corregida: 1.0.22-1.1
  Version impact unknown
  nvd · lldpd · opensuse · tumbleweed
[lldpd]Desconocido
Paquete fuente: [lldpd]
Detalles (1)
- 1.0.22-2.3 · x86_64 · tumbleweed
  Corregida · Corregida: 1.0.22-1.1
  nvd · lldpd · opensuse · tumbleweed
[lldpd-devel]Desconocido
Paquete fuente: [lldpd]
Detalles (1)
- 1.0.22-2.3 · x86_64 · tumbleweed
  Desconocido · Corregida: 1.0.22-1.1
  Version impact unknown
  nvd · lldpd · opensuse · tumbleweed

Observado: Oct 23, 2026, 10:03:14 PM UTC

Referencias

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]