vulnerability
Amazon Linux AMI 2: CVE-2018-10932: Security patch for lldpad (ALAS-2021-1637)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:A/AC:L/Au:N/C:N/I:P/A:N) | Aug 21, 2018 | May 26, 2021 | Nov 27, 2024 |
Severity
3
CVSS
(AV:A/AC:L/Au:N/C:N/I:P/A:N)
Published
Aug 21, 2018
Added
May 26, 2021
Modified
Nov 27, 2024
Description
lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.
Solution(s)
amazon-linux-ami-2-upgrade-lldpadamazon-linux-ami-2-upgrade-lldpad-debuginfoamazon-linux-ami-2-upgrade-lldpad-devel
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.