Lucene search

[email protected]CVE-2023-24511

HistoryApr 12, 2023 - 9:15 p.m.

CVE-2023-24511

2023-04-1221:15:16

CWE-401

[email protected]

web.nvd.nist.gov

230

arista eos

snmp

memory leak

vulnerability

nvd

cve-2023-24511

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.9%

JSON

On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system.

Affected configurations

NVD

Node

aristaeosRange4.26.0–4.26.10m

aristaeosRange4.27.0–4.27.9m

aristaeosRange4.28.0–4.28.6m

aristaeosRange4.29.0–4.29.2f

AND

aristaceos-labMatch-

aristacloudeosMatch-

aristaveos-labMatch-

arista7010tMatch-

arista7010t-48Match-

arista7010tx-48Match-

arista7010tx-48-dcMatch-

arista7020sr-24c2Match-

arista7020sr-32c2Match-

arista7020tr-48Match-

arista7020tra-48Match-

arista7050cx3-32sMatch-

arista7050cx3m-32sMatch-

arista7050qx-32sMatch-

arista7050qx2-32sMatch-

arista7050sx-128Match-

arista7050sx-64Match-

arista7050sx-72qMatch-

arista7050sx2-128Match-

arista7050sx2-72qMatch-

arista7050sx3-48c8Match-

arista7050sx3-48ycMatch-

arista7050sx3-48yc12Match-

arista7050sx3-48yc8Match-

arista7050sx3-96yc8Match-

arista7050tx-48Match-

arista7050tx-64Match-

arista7050tx-72qMatch-

arista7050tx2-128Match-

arista7050tx3-48c8Match-

arista7060cx-32sMatch-

arista7060cx2-32sMatch-

arista7060dx4-32Match-

arista7060px4-32Match-

arista7060sx2-48yc6Match-

arista7150s-24Match-

arista7150s-52Match-

arista7150s-64Match-

arista7150sc-24Match-

arista7150sc-64Match-

arista7160-32cqMatch-

arista7160-48tc6Match-

arista7160-48yc6Match-

arista7170-32cMatch-

arista7170-32cdMatch-

arista7170-64cMatch-

arista7170b-64cMatch-

arista720df-48yMatch-

arista720dp-24sMatch-

arista720dp-48sMatch-

arista720dt-24sMatch-

arista720dt-48sMatch-

arista720dt-48yMatch-

arista720xp-24y6Match-

arista720xp-24zy4Match-

arista720xp-48y6Match-

arista720xp-48zc2Match-

arista720xp-96zc2Match-

arista722xpm-48y4Match-

arista722xpm-48zy8Match-

arista7250qx-64Match-

arista7260cxMatch-

arista7260cx3Match-

arista7260cx3-64Match-

arista7260qxMatch-

arista7260qx-64Match-

arista7280cr2ak-30Match-

arista7280cr2k-60Match-

arista7280cr3-32d4Match-

arista7280cr3-32p4Match-

arista7280cr3-96Match-

arista7280cr3k-32d4Match-

arista7280cr3k-32p4Match-

arista7280cr3k-96Match-

arista7280dr3-24Match-

arista7280dr3k-24Match-

arista7280eMatch-

arista7280pr3-24Match-

arista7280pr3k-24Match-

arista7280rMatch-

arista7280r2Match-

arista7280r3Match-

arista7280sr3-48yc8Match-

arista7280sr3k-48yc8Match-

arista7300x-32qMatch-

arista7300x-64sMatch-

arista7300x-64tMatch-

arista7300x3-32cMatch-

arista7300x3-48yc4Match-

arista7304Match-

arista7308Match-

arista7316Match-

arista7320x-32cMatch-

arista7368x4Match-

arista7388x5Match-

arista7500eMatch-

arista7500rMatch-

arista7500r2Match-

arista7500r3Match-

arista7500r3-24dMatch-

arista7500r3-24pMatch-

arista7500r3-36cqMatch-

arista7500r3k-36cqMatch-

arista7800r3-36pMatch-

arista7800r3-48cqMatch-

arista7800r3k-48cqMatch-

aristaccs-750x-48thpMatch-

aristaccs-750x-48tpMatch-

aristaccs-750x-48zpMatch-

aristaccs-750x-48zxpMatch-

CPENameOperatorVersion
arista:eosarista eoslt4.26.10m
arista:eosarista eoslt4.27.9m
arista:eosarista eoslt4.28.6m
arista:eosarista eoslt4.29.2f

CPE	Name	Operator	Version
arista:eos	arista eos	lt	4.26.10m
arista:eos	arista eos	lt	4.27.9m
arista:eos	arista eos	lt	4.28.6m
arista:eos	arista eos	lt	4.29.2f

CNA Affected

[
  {
    "vendor": "Arista Networks",
    "product": "EOS",
    "versions": [
      {
        "version": "4.28.0 4.28.5.1M",
        "status": "affected"
      },
      {
        "version": "4.27.0 4.27.8.1M",
        "status": "affected"
      },
      {
        "version": "4.26.0 4.26.9M",
        "status": "affected"
      },
      {
        "version": "4.25.0 4.25.10M",
        "status": "affected"
      },
      {
        "version": "4.24.0 4.24.11M",
        "status": "affected"
      },
      {
        "version": "4.29.0",
        "status": "affected",
        "lessThanOrEqual": "4.29.1F",
        "versionType": "custom"
      }
    ]
  }
]