CVE-2018-10932

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-10932
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10932.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-10932
Downstream
Related
Published
2018-08-21T18:29:00.263Z
Modified
2026-07-08T14:59:28.684696Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.

References

Affected packages

Git / github.com/intel/openlldp

Affected ranges

Type
GIT
Repo
https://github.com/intel/openlldp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
62e50fc0d03a0e4a8fc31d638947f1375f837e8e
Database specific 
{
    "cpe": "cpe:2.3:a:intel:lldptool:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v0.*
v0.9.41
v0.9.42
v0.9.43
v0.9.44
v0.9.45
v0.9.46
v1.*
v1.0.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10932.json"