]> git.ipfire.org Git - thirdparty/lldpd.git/commit
projects / thirdparty / lldpd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3ca1008) | patch
lldp: fix a buffer overflow when handling management address TLV
authorVincent Bernat <vincent@bernat.im>
Sat, 3 Oct 2015 23:50:38 +0000 (01:50 +0200)
committerVincent Bernat <vincent@bernat.im>
Sat, 3 Oct 2015 23:53:14 +0000 (01:53 +0200)
commitdd4f16e7e816f2165fba76e3d162cd8d2978dcb2
treeb52d8a045830e48dafdcde700452f4f491cba7cetree
parent3ca100866133aef2d21cdb193ed8d9c39bf56cc0commit | diff
lldp: fix a buffer overflow when handling management address TLV

When a remote device was advertising a too large management address
while still respecting TLV boundaries, lldpd would crash due to a buffer
overflow. However, the buffer being a static one, this buffer overflow
is not exploitable if hardening was not disabled. This bug exists since
version 0.5.6.
src/daemon/protocols/lldp.c diff | blob | blame | history
Link Layer Discovery Protocol from http://github.com/vincentbernat/lldpd