]> git.ipfire.org Git - thirdparty/lldpd.git/commit
lldp: fix a buffer overflow when handling management address TLV
authorVincent Bernat <vincent@bernat.im>
Sat, 3 Oct 2015 23:50:38 +0000 (01:50 +0200)
committerVincent Bernat <vincent@bernat.im>
Sun, 4 Oct 2015 00:02:39 +0000 (02:02 +0200)
commit3779e6ccb3522b023461a5e0536be804b354a35a
tree7954bfad519f504820111667a8500e9dac055121
parent61de81902b8576e515d29f03239145332ac7284e
lldp: fix a buffer overflow when handling management address TLV

When a remote device was advertising a too large management address
while still respecting TLV boundaries, lldpd would crash due to a buffer
overflow. However, the buffer being a static one, this buffer overflow
is not exploitable if hardening was not disabled. This bug exists since
version 0.5.6.
src/daemon/protocols/lldp.c