On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets
CVE-2023-24548

5.3MEDIUM

Key Information:

Vendor

Arista Networks

Status
Eos
Vendor
CVE Published:
29 August 2023

What is CVE-2023-24548?

On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place.

Affected Version(s)

EOS 4.25.0F

EOS 4.24.0

EOS 4.23.0

References

https://www.arista.com/en/support/advisories-notices/secu...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.