CVE-2023-24513 — On affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may a…

CVE-2023-24513

On affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured options this may cause a recomputation of the TCP checksum ... PUBLISHED

Description (CNA)

On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic.

Affected (CNA)

Vendor / product	Versions
Arista Networks / EOS	affected 4.29.0 through 4.29.1F; affected 4.28.0 through 4.28.5M; affected 4.27.0 through 4.27.8M; affected 4.26.0 through 4.26.9M

CWE

CWE-126

References

https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085

ADP enrichment

CVE

No English description supplied.

https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085

CISA-ADP

No English description supplied.

No references supplied.