CVE-2015-8236

Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716...

Design/Logic Flaw

Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716...

CVE-2015-8236

Arista EOS remote privilege escalation vulnerability CVE-2015-8236 allows remote code execution as root via management-plane access in EOS releases prior to 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 (Bug 138716). Affected platforms inc...

CVE-2015-8236

Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716...

Security Advisory 0015

Security Advisory 0015 PDF Date: November 18th, 2015 Revision | Date | Changes ---|---|--- 1.0 | November 18th, 2015 | Public release 1.1 | November 18th, 2015 | Updated to include CVE number and bug ID Arista EOS Remote Privilege Escalation Vulnerability - CVE-2015-8236 This advisory is to...

Security Advisory 0016

Security Advisory 0016 PDF Date: November 4th 2015 Revision| Date| Changes ---|---|--- 1.0 | November 5th, 2015 | Initial release Arista Products vulnerability report for security vulnerabilities released for NTP in October, 2015 The NTP project released the following set of low and medium severi...

Security Advisory 0014

Security Advisory 0014 PDF Date: September 23rd, 2015 Revision | Date | Changes ---|---|--- 1.0 | September 23rd, 2015 | Initial release 1.1 | August 11th, 2023 | Updated discovered EOS version 4.12.1 Arista Products vulnerability report for security released for QEMU between August 27th and...

Security Advisory 0013

Security Advisory 0013 PDF Date: September 4th 2015 Revision| Date| Changes ---|---|--- 1.0 | September 4th, 2015 | Initial release Arista Products vulnerability report for security updates released for QEMU on August 23rd, 2015. In August 2015 the Fedora project issued an update for QEMU that...

Security Advisory 0012

Security Advisory 0012 PDF Date: August 20th 2015 Revision | Date | Changes ---|---|--- 1.0 | August 20th, 2015 | Initial release 1.1 | August 24th, 2015 | Updated with patch details. 1.2 | November 22nd, 2017 | Updated with the fixed updated EOS releases Arista 7000 Series Products and Arista EO...

Fedora 22 : dcraw-9.25.0-2.fc22 (2015-8621)

This update contains a fix for a bug which could cause dcraw write past array boundaries. Additionally, it updates dcraw to version 9,25.0 which contains updated color matrices and supports the Canon EOS 5DS. Note that Tenable Network Security has extracted the preceding description block directl...

Fedora 21 : dcraw-9.25.0-2.fc21 (2015-8647)

This update contains a fix for a bug which could cause dcraw write past array boundaries. Additionally, it updates dcraw to version 9,25.0 which contains updated color matrices and supports the Canon EOS 5DS. Note that Tenable Network Security has extracted the preceding description block directl...

Fedora 20 : dcraw-9.25.0-2.fc20 (2015-8671)

This update contains a fix for a bug which could cause dcraw write past array boundaries. Additionally, it updates dcraw to version 9,25.0 which contains updated color matrices and supports the Canon EOS 5DS. Note that Tenable Network Security has extracted the preceding description block directl...

Security Advisory 0010

Security Advisory 0010 PDF Date: May 14th 2015 Revision| Date| Changes ---|---|--- 1.0 | May 14th, 2015 | Initial release 1.1 | November 22nd, 2017 | Resolution section updated to reflect the correct BUGID Arista 7000 Series Products and Arista EOS are vulnerable to CVE-2015-3456. On May 13th, 20...

How to Run Linux Kernel on Canon DSLRs Cameras

Last month, I Got a Canon's amazing and powerful video-capable DSLR Camera and was wondering if I could play a hack on it. Yes, Just like last time I installed and run Linux on my PlayStation 3 gaming console and the popular game console, the Nintendo Wii. What If I could port Linux Kernel to my...

Security Advisory 0009

Security Advisory 0009 PDF Date: January 28th 2015 Revision| Date| Changes ---|---|--- 1.0 | January 28th 2015 | Initial release Arista 7000 Series Products and Arista EOS are not remotely exploitable by CVE-2015-0235 On Jan 27th, information was released about a security advisory for the glibc...

Security Advisory 0008

Security Advisory 0008 PDF Date: January 9th 2015 Revision| Date| Changes ---|---|--- 1.0 | January 9th 2015 | Initial release Arista 7000 Series Products and Arista EOS are not vulnerable to NTP CVE-2014-9293, CVE-2014-9294, CVE-2014-9295, and CVE-2014-9296. In December 2014, the Network Time...

Security Advisory 0007

Security Advisory 0007 PDF Date: October 20th 2014 Revision | Date | Changes ---|---|--- 1.0 | October 20th 2014 | Initial release SSLv3 is vulnerable to potential man in the middle attacks CVE-2014-3566 On October 14th, Arista became aware of a vulnerability in the Secure Sockets Layer version 3...

Security Advisory 0006

Security Advisory 0006 PDF Date: September 29th 2014 Revision | Date | Changes ---|---|--- 1.0 | September 29th 2014 | Initial release 1.1 | September 30th 2014 | Additional details on maintenance releases 1.2 | October 29th 2014 | Additional details on fixed releases 1.3 | November 4th 2014 |...

GNU Bash CVE-2014-6271 Remote Code Execution Vulnerability

Description GNU Bash is prone to remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Advantech EKI-1320 1.98...

Security Advisory 0005

Security Advisory 0005 PDF Date: 6/9/2014 Revision | Date | Changes ---|---|--- 1.0 | June 9th 2014 | Initial release 1.1 | June 12th 2014 | Addition of patch installation details 1.2 | July 6th 2015 | Updated patch file Open SSL clients running on Arista EOS vulnerable to SSL/TLS MITM...