CVE-2025-1260

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in unexpected configuration/operations being applied to the switch...

CVE-2025-1259

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in users retrieving data that should not have been available...

CVE-2024-9135 On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flapping.

On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flapping...

CVE-2024-9135

CVE-2024-9135 affects Arista EOS on platforms where BGP Link State is configured. A BGP peer flap can cause the BGP agent to leak memory, potentially terminating BGP routing processing and causing route flapping. Affected EOS versions include 4.33.x (4.33.0 and later 4.33.x trains 4.33.1+), 4.32....

CVE-2024-9135 On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flapping.

On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flapping...

CVE-2025-1260

CVE-2025-1260 affects Arista EOS when OpenConfig is enabled with a gNOI server; a gNOI request can be processed when it should be rejected, potentially causing unexpected configuration/operations on vulnerable switches. Affected EOS releases include multiple 4.3x/4.2x trains (examples listed in A...

CVE-2025-1260 On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in unexpected configuration/operations being applied to the switch...

CVE-2025-1260 On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in unexpected configuration/operations being applied to the switch...

CVE-2025-1259 On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in users retrieving data that should not have been available...

CVE-2025-1259

CVE-2025-1259 affects Arista EOS when OpenConfig is configured; a gNOI request can be accepted where it should be rejected, potentially allowing data exposure. The Arista advisory lists affected EOS trains and versions (4.33.x, 4.32.x, 4.31.x, 4.30.x, 4.29.x, 4.28.x and earlier in those trains) a...

CVE-2025-1259 On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected.

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. This issue can result in users retrieving data that should not have been available...

Arista EOS 安全漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. A security vulnerability exists in Arista EOS that stems from improper handling of dynamic ACLs, which could affect access control...

Arista EOS 访问控制错误漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. A security vulnerability exists in Arista EOS that stems from an unrejected gNOI request that could lead to a data leak...

Arista EOS 安全漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista, USA. A security vulnerability exists in Arista EOS that stems from a BGP memory leak that could result in the termination of route processing...

Arista EOS 访问控制错误漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista USA. A security vulnerability exists in Arista EOS that stems from an unrejected gNOI request that could lead to unexpected configuration and operation...

Malicious code in sdk-coin-eos (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1930 Malicious code in sdk-coin-eos (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Advisory 0111

Security Advisory 0111 . CSAF PDF Date: February 25, 2025 Revision | Date | Changes ---|---|--- 1.0 | February 25, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-1259 CVSSv3.1 Base Score: 7.7 CVSS:3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Common Weakness Enumeration: CWE-284:...

Security Advisory 0110

Security Advisory 0110 . CSAF PDF Date: January 24, 2025 Revision | Date | Changes ---|---|--- 1.0 | January 21, 2025 | Initial release 1.1 | January 24, 2025 | Updated Affected Software Versions list The CVE-ID tracking this issue: CVE-2024-9135 CVSSv3.1 Base Score: 5.3...

Security Advisory 0109

Security Advisory 0109 . CSAF PDF Date: February 6, 2025 Revision | Date | Changes ---|---|--- 1.0 | January 14, 2025 | Initial release 1.1 | February 6, 2025 | Updated EOS-Based Product Versions The CVE-ID tracking this issue: CVE-2024-8000 CVSSv3.1 Base Score: 5.3...