CVE-2018-10932
Summary
| CVE | CVE-2018-10932 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-08-21 18:29:00 UTC |
| Updated | 2023-02-12 23:31:00 UTC |
| Description | lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal. |
Risk And Classification
Problem Types: CWE-117
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| OID Printing changes by orgcandman · Pull Request #7 · intel/openlldp · GitHub | CONFIRM | github.com | Third Party Advisory, VDB Entry |
| Red Hat Customer Portal - Access to 24x7 support and knowledge | MISC | access.redhat.com | |
| access.redhat.com/security/cve/CVE-2018-10932 | MISC | access.redhat.com | |
| 1614896 – (CVE-2018-10932) CVE-2018-10932 lldptool: improper sanitization of shell-escape codes | MISC | bugzilla.redhat.com | |
| CVE-2018-10932 - Red Hat Customer Portal | CVE-2018-10932 | access.redhat.com | Third Party Advisory |
| 1614896 – (CVE-2018-10932) CVE-2018-10932 lldptool: improper sanitization of shell-escape codes | CONFIRM | bugzilla.redhat.com | Issue Tracking, Third Party Advisory |
| 1551623 – lldptool reports unparsed OID under Management Address | CONFIRM | bugzilla.redhat.com | Issue Tracking, Third Party Advisory |
| IBM X-Force Exchange | lldptool weak security | exchange.xforce.ibmcloud.com | Third Party Advisory |
| Red Hat Customer Portal | REDHAT | access.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 352374 Amazon Linux Security Advisory for lldpad: ALAS2-2021-1637
- 751275 SUSE Enterprise Linux Security Update for open-lldp (SUSE-SU-2021:3520-1)
- 900274 CBL-Mariner Linux Security Update for lldpad 1.0.1
- 903560 Common Base Linux Mariner (CBL-Mariner) Security Update for lldpad (4679)
- 940136 AlmaLinux Security Update for lldpad (ALSA-2019:3673)
- 960697 Rocky Linux Security Update for lldpad (RLSA-2019:3673)