CVE-2018-10932
lldptool: improper sanitization of shell-escape codes
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · August 11, 2018
Updated · June 30, 2026
Description
lldptool can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.
Statement
Red Hat Product Security has rated this issue as having a security impact of Low, and a future update may address this flaw.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 4.3CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-117 · Improper Output Neutralization for Logs