CVE-2018-10932

lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.

lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.

lldptool en versiones 1.0.1 y anteriores pueden imprimir un búfer en bruto, no saneado y controlado por el atacante cuando se muestra la información de mngAddr. Esto puede permitir a un atacante inyectar caracteres de control shell en el búfer y afectar al comportamiento del terminal.