CVE-2023-24513
Published Apr 12, 2023
Last updated 2 years ago
Overview
- Description
- On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic.
- Source
- psirt@arista.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- HIGH
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:arista:cloudeos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47DC93B2-147D-427E-89E5-0F8EC3D884B0",
"versionEndExcluding": "4.26.9m",
"versionStartIncluding": "4.26.0"
},
{
"criteria": "cpe:2.3:a:arista:cloudeos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BA01B5E-EDAB-4C30-9F2C-57C0ACB6EF02",
"versionEndExcluding": "4.27.8m",
"versionStartIncluding": "4.27.0"
},
{
"criteria": "cpe:2.3:a:arista:cloudeos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60CFAB31-7E8C-49E0-BDB2-ED1EF62D9303",
"versionEndExcluding": "4.28.5m",
"versionStartIncluding": "4.28.0"
},
{
"criteria": "cpe:2.3:a:arista:cloudeos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E98581C-4312-4EC2-A253-73D5179DDA6A",
"versionEndExcluding": "4.29.2f",
"versionStartIncluding": "4.29.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:amazon:aws_marketplace:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "38DF4A9E-F836-4389-BCE4-10E5121332E8"
},
{
"criteria": "cpe:2.3:a:equinix:network_edge:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5BE13E07-E588-498B-892A-48AE52E222CD"
},
{
"criteria": "cpe:2.3:a:google:google_cloud_platform_marketplace:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B8139E4B-24C7-4C77-A375-088C6817256D"
},
{
"criteria": "cpe:2.3:a:microsoft:azure_marketplace:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B18F83F7-96C2-4B36-A68F-5B8C4E41D066"
},
{
"criteria": "cpe:2.3:h:arista:dca-200-veos:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6C9985E3-D496-473F-A806-022EC164EF96"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]