lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade lldpad | May 4, 2022 | Aug 21, 2018 |
| Amazon Linux Ami 2 | — | Upgrade lldpadUpgrade lldpad-develUpgrade lldpad-debuginfo | May 26, 2021 | Aug 21, 2018 |
| Centos_linux | — | Upgrade lldpad-debugsourceUpgrade lldpad-debuginfoUpgrade lldpad | Nov 6, 2019 | Aug 21, 2018 |
| Debian | — | Upgrade lldpad | Jul 30, 2024 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade lldpad | Feb 22, 2021 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade lldpad | Jan 20, 2021 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade lldpad | Nov 2, 2020 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade lldpad | Dec 15, 2020 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade lldpad | Oct 26, 2020 | Aug 21, 2018 |
| Oracle_linux | — | Upgrade lldpad | Oct 5, 2022 | Aug 10, 2018 |
| Redhat_linux | — | No solution existsUpgrade lldpad-debuginfoUpgrade lldpadUpgrade lldpad-debugsource | Nov 6, 2019 | Aug 21, 2018 |
| Rocky_linux | — | Upgrade lldpad-debuginfoUpgrade lldpadUpgrade lldpad-debugsource | Mar 12, 2024 | Aug 21, 2018 |
| Suse | — | Upgrade open-lldp-develUpgrade open-lldpUpgrade liblldp_clif1 | Oct 27, 2021 | Aug 21, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub