ByteOS Network

NVD Vulnerability Details :

CVE-2018-10932

Modified

Source-secalert@redhat.com

Published At-21 Aug, 2018 | 18:29

Updated At-12 Feb, 2023 | 23:31

lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	4.3	MEDIUM	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Secondary	3.0	4.3	MEDIUM	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Primary	2.0	3.3	LOW	AV:A/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

Intel Corporation

>>lldptool>>Versions up to 1.0.1(inclusive)

cpe:2.3:a:intel:lldptool:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-117	Primary	secalert@redhat.com
CWE-119	Secondary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://access.redhat.com/errata/RHSA-2019:3673	secalert@redhat.com	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=1551623	secalert@redhat.com	Issue Tracking Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10932	secalert@redhat.com	Issue Tracking Third Party Advisory
https://github.com/intel/openlldp/pull/7	secalert@redhat.com	Third Party Advisory VDB Entry

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History