1195 matches found
Arista Networks EOS Multiple Vulnerabilities (SA0043)
The version of Arista Networks EOS running on the remote device is affected by the following vulnerabilities: - HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service DoS. An unauthenticated, remote attacker can exploit this, by sending continual pings to...
Arista Networks EOS Linux Kernel TCP Multiple DoS (SA0041)
The version of Arista Networks EOS running on the remote device is affected by the following denial of service DoS vulnerabilities related to TCP networking in the Linux kernel, which can be exploited by a remote, unauthenticated attacker: - SACK Panic. The TCPSKBCBskb-tcpgsosegs value is subject...
Arista Networks EOS kernel DoS (SA0040)
The version of Arista Networks EOS running on the remote device is affected by a denial of service vulnerability in the Linux kernel. An unauthenticated, remote attacker can exploit this, by sending malformed packets with rarely used packet options to a vulnerable switch. Note that Nessus has not...
Arista Networks EOS DoS (SA0039)
The version of Arista Networks EOS running on the remote device is affected by a denial of service DoS vulnerability in the client certificate authentication process, due to the crypto/x509 package in Go not limiting the amount of work performed for each chain verification. A remote,...
Arista Networks EOS 802.1x authentication DoS (SA0038)
The version of Arista Networks EOS running on the remote device is affected by a denial of service DoS vulnerability in the 802.1x authentication feature, and by extension MACSec, when dynamic keys are used. An adjacent, unauthenticated attacker can exploit this, by sending a crafted packet from...
Arista Networks EOS/vEOS IP fragment DoS (SA0037)
The version of Arista Networks EOS running on the remote device is affected by a denial of service DoS vulnerability. The Linux kernel is vulnerable to a DoS attack with low rates of specially modified packets targeting IP fragment re-assembly. An remote, unauthenticated attacker can cause a DoS...
Arista Networks tcpmss_mangle_packet DoS (SA0034)
The version of Arista Networks EOS running on the remote device is affected by a denial of service DoS vulnerability. The tcpmssmanglepacket function in net/netfilter/xtTCPMSS.c in the Linux kernel allows a remote, unauthenticated attacker to cause a DoS use-after-free and memory corruption or...
Arista Networks EOS Mlag agent DOS (SA0032)
The version of Arista Networks EOS running on the remote device is affected by a denial of service DoS vulnerability in the switch's Mlag agent. An unauthenticated, remote attacker can exploit this, by sending crafted UDP packets on a specific UDP port destined to the switchâs IP address, in...
Arista Networks EOS DNS 2 byte heap based overflow RCE (SA0030)
The version of Arista Networks EOS running on the remote device is affected by a heap-based buffer overflow in dnsmasq. This vulnerability allows a remote, unauthenticated attacker to run arbitrary code, create a denial of service DoS or an out of memory situation. Note that Nessus has not tested...
Security Advisory 0043
Security Advisory 0043 PDF Date: November 6th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | November 6th, 2019 | Initial Release The CVE-IDs tracking this issue: CVE-2019-9512, CVE-2019-9514, and CVE-2019-9515 CVSSv3 Base Score: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description...
MS-ISAC Releases EOS Software Report List
The Multi-State Information Sharing and Analysis Center MS-ISAC has released an end-of-support EOS software report list. Software that has reached its EOS date no longer receives security updates and patches from the vendor and is, therefore, susceptible to exploitation from security...
Unspecified Vulnerability in Arista Networks Extensible Operating System
Arista Networks Extensible Operating System EOS is a suite of scalable operating systems for next-generation data center and cloud solutions from Arista Networks, Inc. in the United States. A security vulnerability exists in the Label Distribution Protocol protocol implementation in Arista Networ...
CVE-2019-14810
A vulnerability has been found in the implementation of the Label Distribution Protocol LDP protocol in EOS. Under race conditions, the LDP agent can establish an LDP session with a malicious peer potentially allowing the possibility of a Denial of Service DoS attack on route updates and in turn...
Race condition
A vulnerability has been found in the implementation of the Label Distribution Protocol LDP protocol in EOS. Under race conditions, the LDP agent can establish an LDP session with a malicious peer potentially allowing the possibility of a Denial of Service DoS attack on route updates and in turn...
CVE-2019-14810
A vulnerability has been found in the implementation of the Label Distribution Protocol LDP protocol in EOS. Under race conditions, the LDP agent can establish an LDP session with a malicious peer potentially allowing the possibility of a Denial of Service DoS attack on route updates and in turn...
CVE-2019-14810
Arista EOS contains a vulnerability in the Label Distribution Protocol (LDP) implementation (CVE-2019-14810). A race condition allows an unauthenticated attacker to establish an LDP session with a malicious peer, sending route updates that can cause a Denial of Service and potentially an Out of M...
CVE-2019-14810: Concurrent Execution using Shared Resource with Improper Synchronization
A vulnerability has been found in the implementation of the Label Distribution Protocol LDP protocol in EOS. Under race conditions, the LDP agent can establish an LDP session with a malicious peer potentially allowing the possibility of a Denial of Service DoS attack on route updates and in turn...
Security Advisory 0042
Security Advisory 0042 PDF Date: October 9th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | October 9th, 2019 | Initial Release The CVE-IDs tracking this issue are CVE-2019-14810. CVSSv3 Base Score: 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Description This advisory is to document a...
