Lucene search

[email protected]NVD:CVE-2023-24511

HistoryApr 12, 2023 - 9:15 p.m.

CVE-2023-24511

2023-04-1221:15:16

CWE-401

[email protected]

web.nvd.nist.gov

arista eos

snmp

memory leak

resource exhaustion

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

42.7%

JSON

On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system.

Affected configurations

Nvd

Node

aristaeosRange4.26.0–4.26.10m

aristaeosRange4.27.0–4.27.9m

aristaeosRange4.28.0–4.28.6m

aristaeosRange4.29.0–4.29.2f

AND

aristaceos-labMatch-

aristacloudeosMatch-

aristaveos-labMatch-

arista7010tMatch-

arista7010t-48Match-

arista7010tx-48Match-

arista7010tx-48-dcMatch-

arista7020sr-24c2Match-

arista7020sr-32c2Match-

arista7020tr-48Match-

arista7020tra-48Match-

arista7050cx3-32sMatch-

arista7050cx3m-32sMatch-

arista7050qx-32sMatch-

arista7050qx2-32sMatch-

arista7050sx-128Match-

arista7050sx-64Match-

arista7050sx-72qMatch-

arista7050sx2-128Match-

arista7050sx2-72qMatch-

arista7050sx3-48c8Match-

arista7050sx3-48ycMatch-

arista7050sx3-48yc12Match-

arista7050sx3-48yc8Match-

arista7050sx3-96yc8Match-

arista7050tx-48Match-

arista7050tx-64Match-

arista7050tx-72qMatch-

arista7050tx2-128Match-

arista7050tx3-48c8Match-

arista7060cx-32sMatch-

arista7060cx2-32sMatch-

arista7060dx4-32Match-

arista7060px4-32Match-

arista7060sx2-48yc6Match-

arista7150s-24Match-

arista7150s-52Match-

arista7150s-64Match-

arista7150sc-24Match-

arista7150sc-64Match-

arista7160-32cqMatch-

arista7160-48tc6Match-

arista7160-48yc6Match-

arista7170-32cMatch-

arista7170-32cdMatch-

arista7170-64cMatch-

arista7170b-64cMatch-

arista720df-48yMatch-

arista720dp-24sMatch-

arista720dp-48sMatch-

arista720dt-24sMatch-

arista720dt-48sMatch-

arista720dt-48yMatch-

arista720xp-24y6Match-

arista720xp-24zy4Match-

arista720xp-48y6Match-

arista720xp-48zc2Match-

arista720xp-96zc2Match-

arista722xpm-48y4Match-

arista722xpm-48zy8Match-

arista7250qx-64Match-

arista7260cxMatch-

arista7260cx3Match-

arista7260cx3-64Match-

arista7260qxMatch-

arista7260qx-64Match-

arista7280cr2ak-30Match-

arista7280cr2k-60Match-

arista7280cr3-32d4Match-

arista7280cr3-32p4Match-

arista7280cr3-96Match-

arista7280cr3k-32d4Match-

arista7280cr3k-32p4Match-

arista7280cr3k-96Match-

arista7280dr3-24Match-

arista7280dr3k-24Match-

arista7280eMatch-

arista7280pr3-24Match-

arista7280pr3k-24Match-

arista7280rMatch-

arista7280r2Match-

arista7280r3Match-

arista7280sr3-48yc8Match-

arista7280sr3k-48yc8Match-

arista7300x-32qMatch-

arista7300x-64sMatch-

arista7300x-64tMatch-

arista7300x3-32cMatch-

arista7300x3-48yc4Match-

arista7304Match-

arista7308Match-

arista7316Match-

arista7320x-32cMatch-

arista7368x4Match-

arista7388x5Match-

arista7500eMatch-

arista7500rMatch-

arista7500r2Match-

arista7500r3Match-

arista7500r3-24dMatch-

arista7500r3-24pMatch-

arista7500r3-36cqMatch-

arista7500r3k-36cqMatch-

arista7800r3-36pMatch-

arista7800r3-48cqMatch-

arista7800r3k-48cqMatch-

aristaccs-750x-48thpMatch-

aristaccs-750x-48tpMatch-

aristaccs-750x-48zpMatch-

aristaccs-750x-48zxpMatch-

VendorProductVersionCPE
aristaeos*cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*
aristaceos-lab-cpe:2.3:a:arista:ceos-lab:-:*:*:*:*:*:*:*
aristacloudeos-cpe:2.3:a:arista:cloudeos:-:*:*:*:*:*:*:*
aristaveos-lab-cpe:2.3:a:arista:veos-lab:-:*:*:*:*:*:*:*
arista7010t-cpe:2.3:h:arista:7010t:-:*:*:*:*:*:*:*
arista7010t-48-cpe:2.3:h:arista:7010t-48:-:*:*:*:*:*:*:*
arista7010tx-48-cpe:2.3:h:arista:7010tx-48:-:*:*:*:*:*:*:*
arista7010tx-48-dc-cpe:2.3:h:arista:7010tx-48-dc:-:*:*:*:*:*:*:*
arista7020sr-24c2-cpe:2.3:h:arista:7020sr-24c2:-:*:*:*:*:*:*:*
arista7020sr-32c2-cpe:2.3:h:arista:7020sr-32c2:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arista	eos	*	cpe:2.3:o:arista:eos::::::::
arista	ceos-lab	-	cpe:2.3:a:arista:ceos-lab:-:::::::*
arista	cloudeos	-	cpe:2.3:a:arista:cloudeos:-:::::::*
arista	veos-lab	-	cpe:2.3:a:arista:veos-lab:-:::::::*
arista	7010t	-	cpe:2.3:h:arista:7010t:-:::::::*
arista	7010t-48	-	cpe:2.3:h:arista:7010t-48:-:::::::*
arista	7010tx-48	-	cpe:2.3:h:arista:7010tx-48:-:::::::*
arista	7010tx-48-dc	-	cpe:2.3:h:arista:7010tx-48-dc:-:::::::*
arista	7020sr-24c2	-	cpe:2.3:h:arista:7020sr-24c2:-:::::::*
arista	7020sr-32c2	-	cpe:2.3:h:arista:7020sr-32c2:-:::::::*