Memory Leak Vulnerability in Arista EOS BGP Configuration
CVE-2024-9135

5.3MEDIUM

Key Information:

Vendor

Arista Networks

Status
Eos
Vendor
CVE Published:
4 March 2025

What is CVE-2024-9135?

A vulnerability in Arista EOS affects systems configured with BGP Link State, where a BGP peer flap can result in a memory leak within the BGP agent. This can lead to disruptions in BGP routing processing, potentially terminating the agent and causing route flapping. Network administrators should closely monitor their BGP configurations and apply recommended patches to mitigate this issue. For more information, please refer to the official security advisory.

Affected Version(s)

EOS 4.33.0

EOS 4.31.0 <= 4.31.5

EOS 4.30.0 <= 4.30.8.1

References

https://www.arista.com/en/support/advisories-notices/secu...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Craig Dods from Meta’s Infrastructure Security team.
.