]> git.proxmox.com Git - mirror_ovs.git/commit
lldp: fix a buffer overflow when handling management address TLV
authorVincent Bernat <vincent@bernat.im>
Fri, 13 Nov 2020 00:54:52 +0000 (19:54 -0500)
committerIlya Maximets <i.maximets@ovn.org>
Mon, 16 Nov 2020 16:35:17 +0000 (17:35 +0100)
commit53c3f2f2bda3c9c415135ae2a4fbb1bdedd9f393
tree4b0b5b0a2b2f36cc00c0e52f38de3d710b48df0d
parent43484427738194bdd05a1a4169b68e6d02bab080
lldp: fix a buffer overflow when handling management address TLV

Upstream commit:
    commit a8d8006c06d9ac16ebcf33295cbd625c0847ca9b
    Author: Vincent Bernat <vincent@bernat.im>
    Date: Sun, 4 Oct 2015 01:50:38 +0200

    lldp: fix a buffer overflow when handling management address TLV

    When a remote device was advertising a too large management address
    while still respecting TLV boundaries, lldpd would crash due to a buffer
    overflow. However, the buffer being a static one, this buffer overflow
    is not exploitable if hardening was not disabled. This bug exists since
    version 0.5.6.

Fixes: be53a5c447c3 ("auto-attach: Initial support for Auto-Attach standard")
Reported-by: Jonas Rudloff <jonas.t.rudloff@gmail.com>
Reported-at: https://github.com/openvswitch/ovs/pull/335
Co-authored-by: Fabrizio D'Angelo <fdangelo@redhat.com>
Signed-off-by: Fabrizio D'Angelo <fdangelo@redhat.com>
Acked-by: Aaron Conole <aconole@redhat.com>
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
lib/lldp/lldp.c