This is starting to get ridiculous. It seems like there is a CDP/LLDP vulnerability at least once a year. Why doesn't Cisco take the time to sit down and write a secure LLDP/CDP library using bounds checking or something(or use SELinux/apparmor to limit it) and use it across the product portfolio? It seems like that would be much more efficient than having a security advisory every 12 months.
