Joshua Foote

An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication and have unauthorized RIP route updates accepted by the device. Successful exploitation requires that RIPv2 MD5 authentication is configured on the affected interface. An attacker who can inject crafted RIPv2 packets could cause the device to install routes that redirect network traffic through attacker-controlled paths, create routing loops, or blackhole traffic, disrupting network connectivity.

On platforms running Arista EOS with BGP configured, a stack buffer overflow allows a remote attacker to crash the BGP agent by sending a specially crafted packet. This results in the termination of the BGP agent process, causing the loss of all BGP sessions on the device and disrupting network routing until the process recovers. A sophisticated attacker may also achieve arbitrary code execution, potentially compromising the confidentiality and integrity of the system.

On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency (direct or multi-hop) to a BFD-enabled interface can send a specially crafted BFD packet resulting in a system reboot.