Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDATE message.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HArista Eos
OSArista< 4.20.2f
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
Related vulnerabilities
CVE-2014-7169CRITICAL9.8⚠ KEVten sam produkt
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the...
CVE-2014-6271CRITICAL9.8⚠ KEVten sam produkt
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variab...
CVE-2023-24509CRITICAL9.3ten sam produkt
On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having th...
CVE-2021-28500CRITICAL9.1ten sam produkt
An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConf...
CVE-2021-28506CRITICAL9.1ten sam produkt
An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and...