PT-2023-19660 · Arista · Arista Cloudeos

CVE-2023-24513

·

Publicado

2023-04-12

·

Atualizado

2023-04-24

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Arista CloudEOS (affected versions not specified)
Description The issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch, causing a leak of packet buffers. If enough malformed packets are received, the switch may eventually stop forwarding traffic.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Buffer Over-read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-24513

Produtos afetados

Arista Cloudeos