CVE-2023-3646: Out-of-bounds Read

On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload...

PT-2023-25577 · Arista · Arista Eos

Name of the Vulnerable Software and Affected Versions: Arista EOS affected versions not specified Description: On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload. This issue was...

PT-2023-19685 · Arista · Arista Eos

Name of the Vulnerable Software and Affected Versions: Arista EOS affected versions not specified Description: The issue occurs when malformed or truncated packets are received over a VXLAN tunnel and forwarded in hardware on affected platforms running Arista EOS with VXLAN configured. This can...

Security Advisory 0089

Security Advisory 0089 . CSAF PDF Date: August 23, 2023 Revision | Date | Changes ---|---|--- 1.0 | August 23, 2023 | Initial release The CVE-ID tracking this issue: CVE-2023-24548 CVSSv3.1 Base Score: 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Common Weakness Enumeration: CWE-120 Buffer Co...

Security Advisory 0088

Security Advisory 0088 . CSAF PDF Date: August 23, 2023 Revision | Date | Changes ---|---|--- 1.0 | August 23, 2023 | Initial release The CVE-ID tracking this issue: CVE-2023-3646 CVSSv3.1 Base Score: 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Common Weakness Enumeration: CWE-125...

CVE-2021-43171

Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response...

August 8, 2023—KB5029308 (Security-only update)

None None...

Arista Networks EOS Memory Exhaustion (SA0084)

On affected platforms running Arista EOS with SNMP configured and the snmpd process is running, a specially crafted SNMP packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated causing SNMP requests to time out until snmpd is automatically...

July 11, 2023—KB5028232 (Monthly Rollup)

None None...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on June 22, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-173-02 Advantech R-SeeNet ICSA-23-173-03 SpiderControl SCADAWebServer ICSA-23-026-02...

CVE-2023-24510

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...

CVE-2023-24510

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...

Code injection

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...

CVE-2023-24510

CVE-2023-24510 affects Arista EOS on multiple platforms. A malformed DHCP packet can cause the DHCP relay agent to restart, leading to partial denial of service of the DHCP relay service. The issue is present in EOS trains listed by Arista’s advisory and is triggered when two or more DHCP server ...

CVE-2023-24510: Improper Handling of Exceptional Conditions

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...

CVE-2023-24510 On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...

CVE-2023-24510 On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...

CVE-2023-24510

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...

PT-2023-19657

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description A malformed DHCP packet might cause the DHCP relay agent to restart on the affected platforms running EOS. There is no known instance of malicious use of this issue in customer networks...

Security Advisory 0087

Security Advisory 0087 . CSAF PDF Date: May 31, 2023 Revision | Date | Changes ---|---|--- 1.0 | May 31, 2023 | Initial release 1.1 | September 24, 2024 | Update fixed release info The CVE-ID tracking this issue: CVE-2023-24510 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...