PT-2021-16742

Name of the Vulnerable Software and Affected Versions RWG1.M12 versions prior to V1.16.16 RWG1.M12D versions prior to V1.16.16 RWG1.M8 versions prior to V1.16.16 Description A vulnerability has been identified that could cause a partial denial-of-service when specially crafted ARP packets are sen...

CVE-2021-25671: Allocation of Resources Without Limits or Throttling

A vulnerability has been identified in RWG1.M12 All versions V1.16.16, RWG1.M12D All versions V1.16.16, RWG1.M8 All versions V1.16.16. Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is neede...

Design/Logic Flaw

A vulnerability in Juniper Networks Junos OS running on the ACX5448 and ACX710 platforms may cause BFD sessions to flap when a high rate of transit ARP packets are received. This, in turn, may impact routing protocols and network stability, leading to a Denial of Service DoS condition. When a hig...

CVE-2021-0216 Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets

A vulnerability in Juniper Networks Junos OS running on the ACX5448 and ACX710 platforms may cause BFD sessions to flap when a high rate of transit ARP packets are received. This, in turn, may impact routing protocols and network stability, leading to a Denial of Service DoS condition. When a hig...

PT-2021-12936

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 18.2R3-S8 on ACX5448 Juniper Networks Junos OS versions prior to 18.3R3-S5 on ACX5448 Juniper Networks Junos OS versions prior to 18.4R1-S6 on ACX5448 Juniper Networks Junos OS versions prior to...

CVE-2021-0216: Undefined Security Weakness

A vulnerability in Juniper Networks Junos OS running on the ACX5448 and ACX710 platforms may cause BFD sessions to flap when a high rate of transit ARP packets are received. This, in turn, may impact routing protocols and network stability, leading to a Denial of Service DoS condition. When a hig...

CVE-2020-24360

An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed by a device reload. The affected Arista EOS versions are: 4.24.2.4F and below releases in the 4.24.x train; 4.23.4M and below releases in...

Design/Logic Flaw

An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed by a device reload. The affected Arista EOS versions are: 4.24.2.4F and below releases in the 4.24.x train; 4.23.4M and below releases in...

CVE-2020-24360

An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed by a device reload. The affected Arista EOS versions are: 4.24.2.4F and below releases in the 4.24.x train; 4.23.4M and below releases in...

CVE-2020-24360: Improper Resource Shutdown or Release

An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed by a device reload. The affected Arista EOS versions are: 4.24.2.4F and below releases in the 4.24.x train; 4.23.4M and below releases in...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:3913-1)

This update for xen fixes the following issues : CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

SUSE-SU-2020:3913-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

PT-2020-15706

Name of the Vulnerable Software and Affected Versions Arista EOS versions 4.24.2.4F and below releases in the 4.24.x train Arista EOS versions 4.23.4M and below releases in the 4.23.x train Arista EOS versions 4.22.6M and below releases in the 4.22.x train Description An issue with ARP packets in...

Security Advisory 0059

Security Advisory 0059 . CSAF PDF Date: December 16th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | December 16th, 2020 | Initial Release The CVE-ID tracking this issue is: CVE-2020-24360 CVSSv3.1 Base Score: 7.4/10 AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Description This advisory...

Huawei Data Communication: Configuring Rate Limiting for ARP Packets (Deprecated)

This VT has been deprecated and replaced by the following VT: - SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei Data Communication: Validity check of ARP packets

After the validity check of ARP packets is configured, the device checks the consistency between the source and destination MAC addresses in the Ethernet packet header and those in the Data field of the ARP packet. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted...

CVE-2019-18948

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

CVE-2019-18948

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

Design/Logic Flaw

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...

CVE-2019-18948

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M a...