CVE-2020-13100

Name of the Vulnerable Software and Affected Versions Arista CloudVision eXchange (CVX) server versions prior to 4.21.12M Arista CloudVision eXchange (CVX) server versions 4.22.x prior to 4.22.7M Arista CloudVision eXchange (CVX) server versions 4.23.x prior to 4.23.5M Arista CloudVision eXchange (CVX) server versions 4.24.x prior to 4.24.2F

Description The issue allows remote attackers to cause a denial of service, resulting in the crash and restart of the ControllerOob agent, via a malformed control-plane packet.

Recommendations For versions prior to 4.21.12M, update to version 4.21.12M or later. For versions 4.22.x prior to 4.22.7M, update to version 4.22.7M or later. For versions 4.23.x prior to 4.23.5M, update to version 4.23.5M or later. For versions 4.24.x prior to 4.24.2F, update to version 4.24.2F or later.