Medium WID-SEC-2025-0153 1 CVE

Arista EOS: Schwachstelle ermöglicht Denial of Service

Published Jan 21, 2025 · Updated Jan 21, 2025 · de-DE

Vendor: Arista Networks Product: EOS

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Arista EOS ausnutzen, um einen Denial of Service zu verursachen.

Product

Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.

Vulnerabilities 1

Medium 5.3

CVE-2024-9135

On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flapping.

On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flapping.

Arista Networks EOS Network devices

Mar 4, 2025

Revision history

2025-01-21 #1
Initiale Fassung

References

Arista Security Advisory vom 2025-01-21
https://www.arista.com/en/support/advisories-notices/security-advisory/21092-security-advisory-0110