Description (CNA)
The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerability impacts the VeloCloud VCMP tunnel protocol only. A successful exploit can cause the affected process to terminate and restart, leading to a temporary disruption of traffic. Hosts on the internet that are unauthenticated and unable to form an overlay peer relationship can not trigger the vulnerable logic.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Arista Networks / VeloCloud | affected 1.0.0.0 before 5.2.0.0; affected 5.2.0.0 before 5.2.7.0; affected 6.1.0.0 before 6.1.5.0; affected 6.4.0.0 before 6.4.2.0 |
| Arista Networks / VeloCloud Gateway | affected 1.0.0.0 before 5.2.0.0; affected 5.2.0.0 before 5.2.7.0; affected 6.1.0.0 before 6.1.5.0; affected 6.4.0.0 before 6.4.2.0 |
CWE
CWE-787
References
ADP enrichment
No English description supplied.
No references supplied.