← Back

CVE-2023-24513

nvd nist
Published: Apr 12, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic.

Affected (4)

Products: Arista: Cloudeos
Arista
1 product
Cloudeos
Configuration A
4 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
Arista
Cloudeos
From 4.26.0 to 4.26.9m
Cloudeos
From 4.27.0 to 4.27.8m
Cloudeos
From 4.28.0 to 4.28.5m
Cloudeos
From 4.29.0 to 4.29.2f
Running on/withPlatform Versions
Amazon
Aws Marketplace
All versions
Arista
Dca 200 Veos
All versions
Equinix
Network Edge
All versions
Google
Google Cloud Platform Marketplace
All versions
Microsoft
Azure Marketplace
All versions

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-126
Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (2)

Source: psirt@arista.com
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory

Timeline

No history available yet.