Description
lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Intel | lldptool | 1.0.1 and older | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | lldpad | 1.0.1+git20180808.4e642bd-1 | — |
| Debian 13 | lldpad | 1.0.1+git20180808.4e642bd-1 | — |
| Debian 12 | lldpad | 1.0.1+git20180808.4e642bd-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | lldpad | No fix yet | — |
| Ubuntu 16.04 LTS | lldpad | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | lldpad | 1.0.1-13.git036e314.el8 | RHSA-2019:3673 |
| RHEL 7 | lldpad +1 | 1.0.1-5.git036e314.el7 | RHBA-2019:2339 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | lldpad | 1.0.1-13.git036e314.el8 | RLSA-2019:3673 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | open-lldp | 0.9.46-7.3.1 | SUSE-SU-2021:3520-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | open-lldp | 0.9.46-7.3.1 | SUSE-SU-2021:3520-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | lldpad +1 | 1.0.1-5.git036e314.amzn2.0.1 | ALAS2-2021-1637 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | lldpad | 1.0.1-13.git036e314.el8 | ELSA-2019-3673 |
Advisories 6
- RHSA-2019:3673 Red Hat Security Advisory: lldpad security and bug fix update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RHBA-2019:2339 Red Hat Bug Fix Advisory: lldpad bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
- RLSA-2019:3673 Low: lldpad security and bug fix update Rocky Linux Security Advisories · Feb 5, 2026
- SUSE-SU-2021:3520-1 Security update for open-lldp SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2-2021-1637 Low: lldpad security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 24, 2021
- ELSA-2019-3673 Low: lldpad security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 14, 2019