CVSS: 7.4EPSS: 0%CPEs: 29EXPL: 1CVE-2020-24360
https://notcve.org/view.php?id=CVE-2020-24360
An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kernel crash, followed by a device reload. The affected Arista EOS versions are: 4.24.2.4F and below releases in the 4.24.x train; 4.23.4M and below releases in the 4.23.x train; 4.22.6M and below releases in the 4.22.x train. Un problema con los paquetes ARP en el EOS de Arista afectando a la serie de productos 7800R3, 7500R3 y 7280R3, puede resultar en un problema que causa un bloqueo del kernel, seguido de una recarga del dispositivo. Las versiones de Arista EOS afectadas son: 4.24.2.4F y versiones por debajo en el tren 4.24.x; 4.23.4M y versiones por debajo en el tren 4.23.x; 4.22.6M y versiones por debajo en el tren 4.22.x • https://www.arista.com/en/support/advisories-notices/security-advisories/11999-security-advisory-59 • CWE-404: Improper Resource Shutdown or Release •
CVSS: 5.9EPSS: 0%CPEs: 50EXPL: 1CVE-2020-26569
https://notcve.org/view.php?id=CVE-2020-26569
In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result packets can be incorrectly forwarded across VLAN boundaries. This can result in traffic being discarded on the receiving VLAN. This affects versions: 4.21.12M and below releases in the 4.21.x train; 4.22.7M and below releases in the 4.22.x train; 4.23.5M and below releases in the 4.23.x train; 4.24.2F and below releases in the 4.24.x train. En unas configuraciones EVPN VxLAN en Arista EOS, los paquetes malformados específicos pueden conllevar a enlaces incorrectos de MAC a IP y, como resultado, los paquetes pueden ser reenviados incorrectamente a través de los límites de la VLAN. Esto puede causar que el tráfico se descarte en la VLAN receptora. • https://www.arista.com/en/support/advisories-notices/security-advisories/11997-security-advisory-57 •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 1CVE-2020-15897
https://notcve.org/view.php?id=CVE-2020-15897
Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause traffic loss or incorrect forwarding of traffic via a malformed link-state PDU to the IS-IS router. Arista EOS versiones anteriores a 4.21.12M, versiones 4.22.x anteriores a 4.22.7M, versiones 4.23.x anteriores a 4.23.5M y versiones 4.24.x anteriores a 4.24.2F, permite a atacantes remotos causar pérdida de tráfico o reenvío incorrecto de tráfico por medio de una PDU de estado de enlace malformado hacia el enrutador IS-IS • https://www.arista.com/en/support/advisories-notices/security-advisories/11760-security-advisory-54 •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2020-17355
https://notcve.org/view.php?id=CVE-2020-17355
Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DHCP packet which leads to an incorrect route being installed. Arista EOS versiones anteriores a 4.21.12M, 4.22.x versiones anteriores a 4.22.7M, 4.23.x versiones anteriores a 4.23.5M y 4.24.x versiones anteriores a 4.24.2F, permite a atacantes remotos causar una denegación de servicio (reinicio de agentes) por medio de la creación de un paquete DHCP malformado que conlleva a la instalación de una ruta inapropiada • https://www.arista.com/en/support/advisories-notices/security-advisories/11759-security-advisory-53 •
CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0CVE-2019-18948
https://notcve.org/view.php?id=CVE-2019-18948
An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M and below releases in the 4.22.x train, 4.23.1F and below releases in the 4.23.x train, and all releases in 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 code train. Se encontró un problema en Arista EOS. • https://www.arista.com/en/support/advisories-notices/security-advisories/10292-security-advisory-47 •