CVE-2023-24513 On affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured options this may cause a recomputation of the TCP checksum ...

On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine Sfe can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually st...

CVE-2023-24513

CVE-2023-24513 affects Arista CloudEOS Sfe in multiple CloudEOS trains. The issue is a size-check bypass in the Software Forwarding Engine that can lead to buffer over-reads and, depending on options, TCP checksum recomputation, potentially enabling DoS via malformed packets and packet-buffer lea...

Security Advisory 0085

Security Advisory 0085 . CSAF PDF Date: April 11, 2023 Revision | Date | Changes ---|---|--- 1.0 | April 11, 2023 | Initial release This advisory consists of two CVEs which affect the Arista CloudEOS product. CVE-ID: CVE-2023-24545 CVSSv3.1 Base Score: 7.5...