906 matches found
CVE-2018-5255
The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service agent restart via crafted UDP packets...
CVE-2018-5255
The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service agent restart via crafted UDP packets...
Code injection
The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service agent restart via crafted UDP packets...
CVE-2018-5255
The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service agent restart via crafted UDP packets...
CVE-2018-5255
The CVE affects Arista EOS Mlag agent: in EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F, remote attackers can trigger a DoS by sending crafted UDP packets, restarting the Mlag agent. A fix is available: EOS 4.19.4M or 4.20.2F or later, via patches (CVE-2018-5255 hotfixes CVE-2018-5255-4-19-hotf...
Security Advisory 0032
Security Advisory 0032 PDF Date: March 1st, 2018 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | March 1st, 2018 | Initial Release Affected Platforms: All EOS platforms Affected Software Version: This issue was introduced in EOS-4.19.0F release. The CVE-ID tracking this issue is...
Arista Networks Device Detection
Binary data aristaeosdetect.nbin...
Arista Networks EOS IPv6 Neighbor Discovery Packet DoS (SA0022)
The version of Arista Networks EOS running on the remote device is affected by a denial of service vulnerability due to a flaw when handling specially crafted IPv6 Neighbor Discovery packets from non link-local sources. An unauthenticated, remote attacker can exploit this, via specially crafted...
Arista Networks EOS ngx_chain_to_iovec NULL Pointer Deference DoS (SA0021)
The version of Arista Networks EOS running on the remote device is affected by a denial of service vulnerability in NGINX due to a NULL pointer dereference flaw in the ngxchaintoiovec function within file os/unix/ngxfiles.c when handling specially crafted requests. An unauthenticated, remote...
Arista Networks EOS Multiple Vulnerabilities (SA0024) (SWEET32)
The version of Arista Networks EOS running on the remote device is affected by multiple vulnerabilities in the included OpenSSL library : - An information disclosure vulnerability exists in the dsasignsetup function in dsaossl.c due to a failure to properly ensure the use of constant-time...
Arista Networks EOS ASN.1 Encoder RCE (SA0020)
The version of Arista Networks EOS running on the remote device is affected by a remote code execution vulnerability in the ASN.1 encoder due to an underflow condition that occurs when attempting to encode the value zero represented as a negative integer. An unauthenticated, remote attacker can...
Arista Networks EOS tcp_input Challenge ACKs Shared Counter Disclosure (SA0023)
The version of Arista Networks EOS running on the remote device is affected by a flaw in the Linux kernel implementation within file net/ipv4/tcpinput.c due to a failure to properly determine the rate of challenge ACK segments. An unauthenticated, remote attacker can exploit this issue to access...
Arista Networks EOS libresolv Overflow RCE (SA0017)
The version of Arista Networks EOS running on the remote device is affected by multiple stack-based buffer overflow conditions in the GNU libresolv library, specifically within the senddg and sendvc functions, when handling DNS responses that trigger a call to the getaddrinfo function with the...
Arista Networks EOS 4.17 Multiple Vulnerabilities (SA0024) (SWEET32)
The version of Arista Networks EOS running on the remote device is affected by multiple vulnerabilities in the included OpenSSL library : - An information disclosure vulnerability exists in the dsasignsetup function in dsaossl.c due to a failure to properly ensure the use of constant-time...
Arista Networks EOS MPBGP Denial of Service (SA0029)
The version of Arista Networks EOS running on the remote device is affected by a potential denial of service vulnerability as a result of improper processing of malformed MPBGP updates. TRUSTED...
Arista Networks EOS Multiple Vulnerabilities (SA0019)
The version of Arista Networks EOS running on the remote device is affected by multiple vulnerabilities : - A flaw exists in NTP in the receive function within file ntpd/ntpproto.c that allows packets with an origin timestamp of zero to bypass security checks. An unauthenticated, remote attacker...
Arista Networks EOS Control Plane Packet Handling DoS (SA0025)
The version of Arista Networks EOS running on the remote device is affected by a denial of service vulnerability due to an unspecified flaw when handling certain packets sent to the control plane. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to cause the...
Arista Networks EOS Multiple Vulnerabilities (SA0018) (DROWN)
The version of Arista Networks EOS running on the remote device is affected by multiple vulnerabilities in the included OpenSSL library : - A cipher algorithm downgrade vulnerability exists due to a flaw that is triggered when handling cipher negotiation. A remote attacker can exploit this to...
Security Advisory 0031
Security Advisory 0031 PDF Date: January 3rd, 2018 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | January 3rd, 2018 | Initial Release 1.1 | January 8th, 2018 | Updated description with expanded analysis Arista Products vulnerability report for the following CVEs: Spectre CVE-2017-5753:...
KRACK: WPA2 series of vulnerabilities in the event of early warning-vulnerability warning-the black bar safety net
2017 10 on 16 September, called KRACK vulnerability flaws bug invasion attack method is expressed, for WiFi+WPA2 collect intrusion attack. KRACK tension is the application of 802. 11i 4-way handshake vulnerability in the flaws bug to the ultimate completion of the decryption and fabricated...