Security Advisory 0008

Security Advisory 0008 PDF Date: January 9th 2015 Revision| Date| Changes ---|---|--- 1.0 | January 9th 2015 | Initial release Arista 7000 Series Products and Arista EOS are not vulnerable to NTP CVE-2014-9293, CVE-2014-9294, CVE-2014-9295, and CVE-2014-9296. In December 2014, the Network Time...

Security Advisory 0007

Security Advisory 0007 PDF Date: October 20th 2014 Revision | Date | Changes ---|---|--- 1.0 | October 20th 2014 | Initial release SSLv3 is vulnerable to potential man in the middle attacks CVE-2014-3566 On October 14th, Arista became aware of a vulnerability in the Secure Sockets Layer version 3...

Security Advisory 0006

Security Advisory 0006 PDF Date: September 29th 2014 Revision | Date | Changes ---|---|--- 1.0 | September 29th 2014 | Initial release 1.1 | September 30th 2014 | Additional details on maintenance releases 1.2 | October 29th 2014 | Additional details on fixed releases 1.3 | November 4th 2014 |...

GNU Bash CVE-2014-6271 Remote Code Execution Vulnerability

Description GNU Bash is prone to remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Advantech EKI-1320 1.98...

Security Advisory 0005

Security Advisory 0005 PDF Date: 6/9/2014 Revision | Date | Changes ---|---|--- 1.0 | June 9th 2014 | Initial release 1.1 | June 12th 2014 | Addition of patch installation details 1.2 | July 6th 2015 | Updated patch file Open SSL clients running on Arista EOS vulnerable to SSL/TLS MITM...

Security Advisory 0004

Security Advisory 0004 PDF Date: 4/9/2014 Arista 7000 Series Products and Arista EOS Not Vulnerable to OpenSSL CVE-2014-0160 On April 7th, the OpenSSL Project issued a security advisory for a TLS heartbeat read overrun vulnerability. This vulnerability allows attackers to access the memory of web...