Design/Logic Flaw

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

CVE-2019-18948

Arista EOS contains a vulnerability in the VxLAN implementation where specific malformed ARP packets can crash the VxlanSwFwd agent. Affected EOS versions include 4.21.8M and below (4.21.x), 4.22.3M and below (4.22.x), 4.23.1F and below (4.23.x), and all releases in 4.15–4.20. The issue is trigge...

CVE-2019-18948

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

Security Advisory 0047

Security Advisory 0047 PDF Date: April 14th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | April 14th, 2020 | Initial Release The CVE-ID tracking this issue: CVE-2019-18948 CVSSv3 Base Score: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description This security advisory documents the...

Security Advisory 0046

Security Advisory 0046 PDF Date: March 23, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | March 23, 2020 | Initial Release The CVE-IDs tracking this issue: CVE-2019-17596 CVSSv3 Base Score: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description: This advisory documents the exposure of...

eos-engine.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1119433 Security Researcher maxomaxa Helped patch 1067 vulnerabilities Received 5 Coordinated Disclosure badges Received 5 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting eos-engine.com website and...

Arista Networks EOS LDP DoS (SA0042)

The version of Arista Networks EOS running on the remote device is affected by a denial of service vulnerability in the Label Distribution Protocol LDP. An unauthenticated, remote attacker can exploit this by establishing an LDP session with the EOS device under race conditions and sending route...

Arista Networks EOS Multiple Vulnerabilities (SA0043)

The version of Arista Networks EOS running on the remote device is affected by the following vulnerabilities: - HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service DoS. An unauthenticated, remote attacker can exploit this, by sending continual pings to...

Arista Networks EOS Linux Kernel TCP Multiple DoS (SA0041)

The version of Arista Networks EOS running on the remote device is affected by the following denial of service DoS vulnerabilities related to TCP networking in the Linux kernel, which can be exploited by a remote, unauthenticated attacker: - SACK Panic. The TCPSKBCBskb-tcpgsosegs value is subject...

Arista Networks EOS kernel DoS (SA0040)

The version of Arista Networks EOS running on the remote device is affected by a denial of service vulnerability in the Linux kernel. An unauthenticated, remote attacker can exploit this, by sending malformed packets with rarely used packet options to a vulnerable switch. Note that Nessus has not...

Arista Networks EOS DoS (SA0039)

The version of Arista Networks EOS running on the remote device is affected by a denial of service DoS vulnerability in the client certificate authentication process, due to the crypto/x509 package in Go not limiting the amount of work performed for each chain verification. A remote,...

Arista Networks EOS 802.1x authentication DoS (SA0038)

The version of Arista Networks EOS running on the remote device is affected by a denial of service DoS vulnerability in the 802.1x authentication feature, and by extension MACSec, when dynamic keys are used. An adjacent, unauthenticated attacker can exploit this, by sending a crafted packet from...

Arista Networks EOS/vEOS IP fragment DoS (SA0037)

The version of Arista Networks EOS running on the remote device is affected by a denial of service DoS vulnerability. The Linux kernel is vulnerable to a DoS attack with low rates of specially modified packets targeting IP fragment re-assembly. An remote, unauthenticated attacker can cause a DoS...

Arista Networks tcpmss_mangle_packet DoS (SA0034)

The version of Arista Networks EOS running on the remote device is affected by a denial of service DoS vulnerability. The tcpmssmanglepacket function in net/netfilter/xtTCPMSS.c in the Linux kernel allows a remote, unauthenticated attacker to cause a DoS use-after-free and memory corruption or...

Arista Networks EOS Mlag agent DOS (SA0032)

The version of Arista Networks EOS running on the remote device is affected by a denial of service DoS vulnerability in the switch's Mlag agent. An unauthenticated, remote attacker can exploit this, by sending crafted UDP packets on a specific UDP port destined to the switch’s IP address, in...

Arista Networks EOS DNS 2 byte heap based overflow RCE (SA0030)

The version of Arista Networks EOS running on the remote device is affected by a heap-based buffer overflow in dnsmasq. This vulnerability allows a remote, unauthenticated attacker to run arbitrary code, create a denial of service DoS or an out of memory situation. Note that Nessus has not tested...

Security Advisory 0043

Security Advisory 0043 PDF Date: November 6th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | November 6th, 2019 | Initial Release The CVE-IDs tracking this issue: CVE-2019-9512, CVE-2019-9514, and CVE-2019-9515 CVSSv3 Base Score: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description...

MS-ISAC Releases EOS Software Report List

The Multi-State Information Sharing and Analysis Center MS-ISAC has released an end-of-support EOS software report list. Software that has reached its EOS date no longer receives security updates and patches from the vendor and is, therefore, susceptible to exploitation from security...

Unspecified Vulnerability in Arista Networks Extensible Operating System

Arista Networks Extensible Operating System EOS is a suite of scalable operating systems for next-generation data center and cloud solutions from Arista Networks, Inc. in the United States. A security vulnerability exists in the Label Distribution Protocol protocol implementation in Arista Networ...

CVE-2019-14810

A vulnerability has been found in the implementation of the Label Distribution Protocol LDP protocol in EOS. Under race conditions, the LDP agent can establish an LDP session with a malicious peer potentially allowing the possibility of a Denial of Service DoS attack on route updates and in turn...