lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - lldptool: improper sanitization of shell-escape codes (CVE-2018-10932)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2019:3673 advisory.

  - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr     information is displayed. This may allow an attacker to inject shell control characters into the buffer     and impact the behavior of the terminal. (CVE-2018-10932)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-3673 advisory.

    [1.0.1-13.git036e314]
    - After gating yml updates

    [1.0.1-12.git036e314]
    - Add support for DSCP selectors in APP TLVs (#1704660)

    [1.0.1-11.git036e314]
    - Fix memleak on TLV reception (#1727326)

    [1.0.1-10.git036e314]
    - Fix the OID display (#1614933)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2019:3673 advisory.

  - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr     information is displayed. This may allow an attacker to inject shell control characters into the buffer     and impact the behavior of the terminal. (CVE-2018-10932)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3520-1 advisory.

  - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr     information is displayed. This may allow an attacker to inject shell control characters into the buffer     and impact the behavior of the terminal. (CVE-2018-10932)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the lldpad package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - lldptool version 1.0.1 and older can print a raw,     unsanitized attacker controlled buffer when mngAddr     information is displayed. This may allow an attacker to     inject shell control characters into the buffer and     impact the behavior of the terminal.(CVE-2018-10932)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lldpad package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - lldptool can print a raw, unsanitized attacker     controlled buffer when mngAddr information is     displayed. This may allow an attacker to inject shell     control characters into the buffer and impact the     behavior of the terminal.(CVE-2018-10932)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of lldpad installed on the remote host is prior to 1.0.1-5.git036e314. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1637 advisory.

  - lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr     information is displayed. This may allow an attacker to inject shell control characters into the buffer     and impact the behavior of the terminal. (CVE-2018-10932)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the lldpad package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - lldptool version 1.0.1 and older can print a raw,     unsanitized attacker controlled buffer when mngAddr     information is displayed. This may allow an attacker to     inject shell control characters into the buffer and     impact the behavior of the terminal.(CVE-2018-10932)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the lldpad package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - lldptool version 1.0.1 and older can print a raw,     unsanitized attacker controlled buffer when mngAddr     information is displayed. This may allow an attacker to     inject shell control characters into the buffer and     impact the behavior of the terminal.(CVE-2018-10932)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2019:3673 advisory.

  - lldptool: improper sanitization of shell-escape codes (CVE-2018-10932)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:3673 advisory.

    The lldpad packages provide the Linux user space daemon and configuration tool for Intel's Link Layer     Discovery Protocol (LLDP) Agent with Enhanced Ethernet support.

    Security Fix(es):

    * lldptool: improper sanitization of shell-escape codes (CVE-2018-10932)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

- Add upstream fix for improper sanitization of     shell-escape codes when lldptool parses a mngAddr TLV     (CVE-2018-10932).

  - Add upstream patch to support DSCP selectors in APP     TLVs. This allows configuration of DSCP-based packet     prioritization on capable network devices.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199219	RHEL 6 : lldpad (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
184689	Rocky Linux 8 : lldpad (RLSA-2019:3673)	Nessus	Rocky Linux Local Security Checks	medium
180678	Oracle Linux 8 : lldpad (ELSA-2019-3673)	Nessus	Oracle Linux Local Security Checks	medium
157693	AlmaLinux 8 : lldpad (ALSA-2019:3673)	Nessus	Alma Linux Local Security Checks	medium
154630	SUSE SLED12 / SLES12 Security Update : open-lldp (SUSE-SU-2021:3520-1)	Nessus	SuSE Local Security Checks	medium
151416	EulerOS Virtualization 3.0.2.2 : lldpad (EulerOS-SA-2021-2147)	Nessus	Huawei Local Security Checks	medium
151318	EulerOS Virtualization for ARM 64 3.0.2.0 : lldpad (EulerOS-SA-2021-2121)	Nessus	Huawei Local Security Checks	medium
149864	Amazon Linux 2 : lldpad (ALAS-2021-1637)	Nessus	Amazon Linux Local Security Checks	medium
147692	EulerOS Virtualization 2.9.0 : lldpad (EulerOS-SA-2021-1658)	Nessus	Huawei Local Security Checks	medium
147593	EulerOS Virtualization 2.9.1 : lldpad (EulerOS-SA-2021-1611)	Nessus	Huawei Local Security Checks	medium
147086	EulerOS Virtualization for ARM 64 3.0.6.0 : lldpad (EulerOS-SA-2021-1588)	Nessus	Huawei Local Security Checks	medium
147042	EulerOS Virtualization 3.0.6.6 : lldpad (EulerOS-SA-2021-1497)	Nessus	Huawei Local Security Checks	medium
146684	EulerOS 2.0 SP2 : lldpad (EulerOS-SA-2021-1325)	Nessus	Huawei Local Security Checks	medium
145643	CentOS 8 : lldpad (CESA-2019:3673)	Nessus	CentOS Local Security Checks	medium
145173	EulerOS 2.0 SP3 : lldpad (EulerOS-SA-2021-1095)	Nessus	Huawei Local Security Checks	medium
144186	EulerOS 2.0 SP8 : lldpad (EulerOS-SA-2020-2519)	Nessus	Huawei Local Security Checks	medium
142079	EulerOS 2.0 SP5 : lldpad (EulerOS-SA-2020-2290)	Nessus	Huawei Local Security Checks	medium
141717	EulerOS 2.0 SP9 : lldpad (EulerOS-SA-2020-2234)	Nessus	Huawei Local Security Checks	medium
141684	EulerOS 2.0 SP9 : lldpad (EulerOS-SA-2020-2233)	Nessus	Huawei Local Security Checks	medium
130563	RHEL 8 : lldpad (RHSA-2019:3673)	Nessus	Red Hat Local Security Checks	medium
120803	Fedora 28 : lldpad (2018-cec7093baa)	Nessus	Fedora Local Security Checks	medium
120215	Fedora 29 : lldpad (2018-06d56c8c9d)	Nessus	Fedora Local Security Checks	medium
119008	Fedora 27 : lldpad (2018-e9d1ec6dbc)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2018-10932

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium