PT-2020-14695

Name of the Vulnerable Software and Affected Versions Arista EOS versions 4.21.12M and earlier, 4.22.x through 4.22.6M, 4.23.x through 4.23.4M, and 4.24.x through 4.24.1F Description The issue allows remote attackers to cause traffic loss or incorrect forwarding of traffic via a malformed...

sk.eos-solutions.com Cross Site Scripting vulnerability OBB-1279595

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

eos buffer error vulnerability

eos is an open source smart contract platform. A stack overflow vulnerability exists in the 'abiserializer' function in versions after eos commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168. An attacker can exploit this vulnerability by sending a network request to attack an eos network node...

CVE-2020-11622

A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below releases in the 4.22.x train, 4.21.3M to 4.21.9M releases in the 4.21.x train, 4.21.3FX-7368., 4.21.4-FCRFX., 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, and 4.23.2.1...

Design/Logic Flaw

A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below releases in the 4.22.x train, 4.21.3M to 4.21.9M releases in the 4.21.x train, 4.21.3FX-7368., 4.21.4-FCRFX., 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, and 4.23.2.1...

CVE-2020-11622

A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below releases in the 4.22.x train, 4.21.3M to 4.21.9M releases in the 4.21.x train, 4.21.3FX-7368., 4.21.4-FCRFX., 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, and 4.23.2.1...

CVE-2020-11622

The CVE concerns Arista CloudEOS VM / vEOS Router code when TCP MSS options are configured. Affected releases include CloudEOS VM / vEOS Router: 4.23.2M and below in 4.23.x, 4.22.4M and below in 4.22.x, 4.21.3M–4.21.9M in 4.21.x, plus special builds 4.21.3FX-7368., 4.21.4-FCRFX. , 4.21.4.1, 4.21....

CVE-2020-11622: Undefined Security Weakness

A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below releases in the 4.22.x train, 4.21.3M to 4.21.9M releases in the 4.21.x train, 4.21.3FX-7368., 4.21.4-FCRFX., 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, and 4.23.2.1...

PT-2020-12732

Name of the Vulnerable Software and Affected Versions Arista Cloud EOS VM / vEOS versions 4.23.2M and below Arista Cloud EOS VM / vEOS versions 4.22.4M and below Arista Cloud EOS VM / vEOS versions 4.21.3M through 4.21.9M Arista Cloud EOS VM / vEOS version 4.21.3FX-7368. Arista Cloud EOS VM / vEO...

eos buffer overflow vulnerability

eos is an open source smart contract platform. A stack overflow vulnerability exists in the 'abiserializer' function in versions after eos commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168. An attacker can exploit this vulnerability by sending a network request to attack an eos network node...

Security Advisory 0048

Security Advisory 0048 PDF Date: May 13, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | May 13, 2020 | Initial Release The CVE-ID tracking this issue: CVE-2020-10188 CVSSv3 Base Score: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Description: This security advisory documents the exposur...

EOS has a fake recharge vulnerability

EOS is a blockchain operating system designed for commercial distributed applications. The vulnerability stems from an improper configuration of a specific parameter delay-sec in cleos. An attacker could use this vulnerability to increase the amount of tokens in an individual's account with a fal...

CVE-2019-18948

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

CVE-2019-18948

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

Design/Logic Flaw

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

CVE-2019-18948

Arista EOS contains a vulnerability in the VxLAN implementation where specific malformed ARP packets can crash the VxlanSwFwd agent. Affected EOS versions include 4.21.8M and below (4.21.x), 4.22.3M and below (4.22.x), 4.23.1F and below (4.23.x), and all releases in 4.15–4.20. The issue is trigge...

CVE-2019-18948

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

CVE-2019-18948: Undefined Security Weakness

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

PT-2020-10019

Name of the Vulnerable Software and Affected Versions Arista EOS versions 4.21.8M and below in the 4.21.x train Arista EOS versions 4.22.3M and below in the 4.22.x train Arista EOS versions 4.23.1F and below in the 4.23.x train Arista EOS versions 4.15.x Arista EOS versions 4.16.x Arista EOS...

Security Advisory 0047

Security Advisory 0047 PDF Date: April 14th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | April 14th, 2020 | Initial Release The CVE-ID tracking this issue: CVE-2019-18948 CVSSv3 Base Score: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description This security advisory documents the...