Skip to content
OpenAdvisories
High · 7.5 CVE-2021-28504 EUVD-2021-15180GHSA-2pcc-vj7h-7frv

On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol fi ...

Published Apr 1, 2022 · Updated Aug 3, 2024 · Assigned by Arista

Description

On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as expected.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.26.3F – ≤ 4.26.0, 4.27.0F – ≤ 4.27.0 —

References