On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process.

CVE-2023-24511

What is CVE-2023-24511?

A vulnerability exists in Arista EOS when SNMP is configured, whereby a specially crafted packet can trigger a memory leak in the snmpd process. This leads to the termination of the snmpd processing, resulting in SNMP requests timing out until an automatic restart occurs. Additionally, this vulnerability can cause memory resource exhaustion for other processes on the switch, potentially impacting overall performance. However, it does not compromise the confidentiality or integrity of the system.

References