CVE-2023-24511

Published: Apr 12, 2023Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system.

Affected (4)

Products: Arista: Eos

Arista

1 product

Eos

Configuration A

4 vulnerable · 110 platform

Vulnerable Software	Affected Versions
Arista Eos	From 4.26.0 to 4.26.10m
Arista Eos	From 4.27.0 to 4.27.9m
Arista Eos	From 4.28.0 to 4.28.6m
Arista Eos	From 4.29.0 to 4.29.2f

Running on/with	Platform Versions
Arista 7010t	All versions
Arista 7010t 48	All versions
Arista 7010tx 48	All versions
Arista 7010tx 48 Dc	All versions
Arista 7020sr 24c2	All versions
Arista 7020sr 32c2	All versions
Arista 7020tr 48	All versions
Arista 7020tra 48	All versions
Arista 7050cx3 32s	All versions
Arista 7050cx3m 32s	All versions
Arista 7050qx 32s	All versions
Arista 7050qx2 32s	All versions
Arista 7050sx 128	All versions
Arista 7050sx 64	All versions
Arista 7050sx 72q	All versions
Arista 7050sx2 128	All versions
Arista 7050sx2 72q	All versions
Arista 7050sx3 48c8	All versions
Arista 7050sx3 48yc	All versions
Arista 7050sx3 48yc12	All versions
Arista 7050sx3 48yc8	All versions
Arista 7050sx3 96yc8	All versions
Arista 7050tx 48	All versions
Arista 7050tx 64	All versions
Arista 7050tx 72q	All versions
Arista 7050tx2 128	All versions
Arista 7050tx3 48c8	All versions
Arista 7060cx 32s	All versions
Arista 7060cx2 32s	All versions
Arista 7060dx4 32	All versions
Arista 7060px4 32	All versions
Arista 7060sx2 48yc6	All versions
Arista 7150s 24	All versions
Arista 7150s 52	All versions
Arista 7150s 64	All versions
Arista 7150sc 24	All versions
Arista 7150sc 64	All versions
Arista 7160 32cq	All versions
Arista 7160 48tc6	All versions
Arista 7160 48yc6	All versions
Arista 7170 32c	All versions
Arista 7170 32cd	All versions
Arista 7170 64c	All versions
Arista 7170b 64c	All versions
Arista 720df 48y	All versions
Arista 720dp 24s	All versions
Arista 720dp 48s	All versions
Arista 720dt 24s	All versions
Arista 720dt 48s	All versions
Arista 720dt 48y	All versions
Arista 720xp 24y6	All versions
Arista 720xp 24zy4	All versions
Arista 720xp 48y6	All versions
Arista 720xp 48zc2	All versions
Arista 720xp 96zc2	All versions
Arista 722xpm 48y4	All versions
Arista 722xpm 48zy8	All versions
Arista 7250qx 64	All versions
Arista 7260cx	All versions
Arista 7260cx3	All versions
Arista 7260cx3 64	All versions
Arista 7260qx	All versions
Arista 7260qx 64	All versions
Arista 7280cr2ak 30	All versions
Arista 7280cr2k 60	All versions
Arista 7280cr3 32d4	All versions
Arista 7280cr3 32p4	All versions
Arista 7280cr3 96	All versions
Arista 7280cr3k 32d4	All versions
Arista 7280cr3k 32p4	All versions
Arista 7280cr3k 96	All versions
Arista 7280dr3 24	All versions
Arista 7280dr3k 24	All versions
Arista 7280e	All versions
Arista 7280pr3 24	All versions
Arista 7280pr3k 24	All versions
Arista 7280r	All versions
Arista 7280r2	All versions
Arista 7280r3	All versions
Arista 7280sr3 48yc8	All versions
Arista 7280sr3k 48yc8	All versions
Arista 7300x 32q	All versions
Arista 7300x 64s	All versions
Arista 7300x 64t	All versions
Arista 7300x3 32c	All versions
Arista 7300x3 48yc4	All versions
Arista 7304	All versions
Arista 7308	All versions
Arista 7316	All versions
Arista 7320x 32c	All versions
Arista 7368x4	All versions
Arista 7388x5	All versions
Arista 7500e	All versions
Arista 7500r	All versions
Arista 7500r2	All versions
Arista 7500r3	All versions
Arista 7500r3 24d	All versions
Arista 7500r3 24p	All versions
Arista 7500r3 36cq	All versions
Arista 7500r3k 36cq	All versions
Arista 7800r3 36p	All versions
Arista 7800r3 48cq	All versions
Arista 7800r3k 48cq	All versions
Arista Ccs 750x 48thp	All versions
Arista Ccs 750x 48tp	All versions
Arista Ccs 750x 48zp	All versions
Arista Ccs 750x 48zxp	All versions
Arista Ceos Lab	All versions
Arista Cloudeos	All versions
Arista Veos Lab	All versions

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (2)

https://www.arista.com/en/support/advisories-notices/security-advisory/17239-security-advisory-0084

Source: psirt@arista.com

ExploitPatchVendor Advisory

https://www.arista.com/en/support/advisories-notices/security-advisory/17239-security-advisory-0084

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

Timeline

No history available yet.