vulnerability
Amazon Linux AMI 2: CVE-2018-10932: Security patch for lldpad (ALAS-2021-1637)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:A/AC:L/Au:N/C:N/I:P/A:N) | 2018-08-21 | 2021-05-26 | 2024-11-27 |
Severity
3
CVSS
(AV:A/AC:L/Au:N/C:N/I:P/A:N)
Published
2018-08-21
Added
2021-05-26
Modified
2024-11-27
Description
lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.
Solution(s)
amazon-linux-ami-2-upgrade-lldpadamazon-linux-ami-2-upgrade-lldpad-debuginfoamazon-linux-ami-2-upgrade-lldpad-devel
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.