827 matches found
CVE-2021-28509
CVE-2021-28509 : Arista EOS TerminAttr and OpenConfig transport can leak MACsec data in clear text to authorized users, enabling potential decryption/modification of MACsec traffic. Affected: EOS devices with Octa and TerminAttr enabled; specific affected versions include EOS 4.23.x–4.27.x trains...
CVE-2021-28508
CVE-2021-28508 affects Arista EOS with TerminAttr and OpenConfig transport enabled. Under certain conditions TerminAttr or Octa may leak IPsec data in clear text to CloudVision/gNMI authorized users, allowing potential decryption/modification of IPsec traffic. Affected EOS versions when Octa is i...
CVE-2021-28508 TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP
This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec sensitive data in clear text in CVP to...
Arista Networks Arista EOS 安全漏洞
Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...
Security Advisory 0077
Security Advisory 0077 . CSAF PDF Date: May 27th, 2022 Revision | Date | Changes ---|---|--- 1.1 | May 27th 2022 | Update the CVE impact of Octa 1.0 | May 25th 2022 | Initial release CVE-2021-28508 CVSSv3.1 Base Score: 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H CWE: CWE-255 Credentials...
Security Advisory 0075
Security Advisory 0075 PDF Date: July 20th, 2022 Revision | Date | Changes ---|---|--- 1.2 | July 20th 2022 | Upload the hotfix for 4.23 train 1.1 | May 13rd 2022 | Update fixed release info 1.0 | April 26th 2022 | Initial release CVE-2022-0778 CVSSv3.1 Base Score: 7.5...
Security Advisory 0076
Security Advisory 0076 . CSAF PDF April 26th, 2022 Revision | Date | Changes ---|---|--- 1.0 | April 26th, 2022 | Initial release 1.1 | May 16th, 2022 | Updated hotfix information The CVE-ID tracking this issue: CVE-2021-28510 CVSSv3.1 Base Score: 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L...
PT-2022-9902 · Arista · Arista Eos
Name of the Vulnerable Software and Affected Versions: Arista EOS affected versions not specified Description: The issue occurs when a Precision Time Protocol PTP packet with an invalid Type-Length-Value TLV is received, causing the PTP agent to restart. Repeated restarts of the service will make...
CVE-2021-28505
On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol...
Design/Logic Flaw
On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol...
CVE-2021-28505
On Arista EOS platforms, CVE-2021-28505 is triggered when a VXLAN match rule exists in an IPv4 ACL applied to ingress on L2/L3 ports or SVIs. The VXLAN rule and any ACL rules that follow may ignore the specified IP protocol if TCAM profile is enabled, potentially allowing or filtering traffic inc...
CVE-2021-28505 On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.
On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol...
Arista Networks Arista EOS 安全漏洞
Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...
Security Advisory 0074
Security Advisory 0074 . CSAF PDF Date: April 1st, 2022 Revision | Date | Changes ---|---|--- 1.0 | April 1st, 2022 | Initial Release The CVE-ID tracking this issue: CVE-2021-28504 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Common Weakness Enumeration: CWE-284 Improper...
Security Advisory 0073
Security Advisory 0073 . CSAF PDF Date: March 29th, 2022 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | March 29th, 2022 | Initial Release The CVE-ID tracking this issue: CVE-2021-28505 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Common Weakness Enumeration:...
CVE-2022-26300
EOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txntestgenplugin...
CVE-2022-26300
EOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txntestgenplugin...
Heap overflow
EOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txntestgenplugin...
CVE-2022-26300
CVE-2022-26300 affects EOS v2.1.0 and is caused by a heap-buffer-overflow in the function txn_test_gen_plugin. Multiple connected sources (NVD, Red Hat, OSV, CVE listings) corroborate that EOS v2.1.0 contains this heap-buffer-overflow vulnerability. The CVSS/impact data indicate a high impact wit...
