Summary
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Arista EOS ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.
Vulnerabilities 2
-
Medium 6.5
On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc.
On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc.
-
Medium 4.3
On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being term
On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being termina…
Revision history
-
#1
Initiale Fassung
References
-
Arista Security Advisory vom 2024-11-19
https://www.arista.com/en/support/advisories-notices/security-advisory/20649-security-advisory-0106
-
Arista Security Advisory vom 2024-11-19
https://www.arista.com/en/support/advisories-notices/security-advisory/20650-security-advisory-0107