Arista EOSの脆弱性4件、BGPの重大な問題に修正版
Summary
Arista EOSのBGP・RIPv2・S-BFD・PTPの処理に脆弱性が4件公表され、最大でCVSS v3は9.8です。該当する機能を使うEOS機器の運用者は、版と設定を確認して修正版へ更新してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Arista EOSのBGP・RIPv2・S-BFD・PTPの処理に脆弱性が4件公表され、最大でCVSS v3は9.8です。該当する機能を使うEOS機器の運用者は、版と設定を確認して修正版へ更新してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Arista NetworksEOS |
4.36.0F – 4.36.2F→ Not listed 4.35.0F – 4.35.6M→ Not listed 4.34.0F – 4.34.8M→ Not listed 4.33.0F – 4.33.10M→ Not listed ≥ 4.25.1F, < 4.33.0F→ 4.33.0F |
Not listed Not listed Not listed Not listed 4.33.0F |
Original description The description as published by the source.
On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to crash.
Successful exploitation causes the BGP agent process to terminate, resulting in the loss of all BGP sessions on the affected device and possible disruption to network routing until the process recovers. Due to the nature of the vulnerability, it may also be possible for a sophisticated attacker to achieve arbitrary code execution, which could compromise the confidentiality and integrity of the affected system.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web arista.com
- web nvd.nist.gov
- web github.com