← CVE Intelligence

CVE-2024-6437

On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options ma PUBLISHED

Description (CNA)

On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may bypass the feature's set nexthop action and be slow-path forwarded (FIB routed) by the kernel as the packets are trapped to the CPU instead of following the redirect action's destination.

Affected (CNA)

Vendor / productVersions
Arista Networks / EOS-Policy Based Routing (PBR)affected 4.32.0F through 4.32.1F; affected 4.31.0M through 4.31.4M; affected 4.30.0M through 4.30.7M; affected 4.29.0M through 4.29.9M; affected 4.28.0M through 4.28.11M; affected 4.27.0M through 4.27.12M; affected 4.26.0M through 4.26.14M; affected 4.25.0M through 4.25.11M; affected 4.24.0M through 4.24.11M; affected 4.23.0M through 4.23.15M; affected 4.22.0M through 4.22.13M; affected 4.21.0M through 4.21.15M
Arista Networks / EOS - BGP Flowspecaffected 4.32.0F through 4.32.1F; affected 4.31.0M through 4.31.4M; affected 4.30.0M through 4.30.7M; affected 4.29.0M through 4.29.9M; affected 4.28.0M through 4.28.11M; affected 4.27.0M through 4.27.12M; affected 4.26.0M through 4.26.14M; affected 4.25.0M through 4.25.11M; affected 4.24.0M through 4.24.11M; affected 4.23.0M through 4.23.15M; affected 4.22.0M through 4.22.13M; affected 4.21.3F through 4.21.15M
Arista Networks / EOS - Interface Traffic Policyaffected 4.32.0F through 4.32.1F; affected 4.31.0M through 4.31.4M; affected 4.30.0M through 4.30.7M; affected 4.29.0M through 4.29.9M; affected 4.28.0M through 4.28.11M; affected 4.27.2F through 4.27.12F

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.