CVE-2018-10932CWE-117

lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed

Medium · published August 21, 2018

CVSS v3.0
4.3
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01038 · 63.6th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2018-08-21T18:00Z
EPSS history
Timeline
  • 21 AUG 18:00Z
    lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed
    cvelistv5