Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-5872 EUVD-2024-47159GHSA-wq57-x73w-8875

On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc.

Published Jan 10, 2025 · Updated Jan 10, 2025 · Assigned by Arista

Vendor: Arista Networks Product: EOS Category: Network devices

Description

On affected platforms running Arista EOS, a specially crafted packet with incorrect VLAN tag might be copied to CPU, which may cause incorrect control plane behavior related to the packet, such as route flaps, multicast routes learnt, etc.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.32.0F – ≤ 4.32.2F, 4.31.0M – ≤ 4.31.4M, 4.30.0M – ≤ 4.30.7M, 4.29.0M – ≤ 4.29.8M, 4.28.1F – ≤ 4.28.11F —

Advisories 1

References