Arista Eos vulnerabilities

• arista eos, extensible operating system +1 more Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass CVE-2026-7473 In KEVPublic exploit 6.9 MediumJune 5, 2026
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• arista eos On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload. CVE-2023-3646 5.9 MediumAugust 29, 2023
• arista eos On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward pac… CVE-2023-24548 5.3 MediumAugust 29, 2023
• arista eos On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart. CVE-2023-24510 7.5 HighJune 5, 2023
• arista eos, arista networks terminattr, arista ceos-lab +2 more +4 more On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. CVE-2023-24512 8.8 HighApril 25, 2023
• arista eos On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login… CVE-2023-24509 9.3 CriticalApril 13, 2023
• arista cloudeos, arista networks eos +1 more On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. CVE-2023-24545 7.5 HighApril 12, 2023
• arista cloudeos, arista networks eos +1 more On affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured options… CVE-2023-24513 6.5 MediumApril 12, 2023
• arista eos On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. CVE-2023-24511 5.3 MediumApril 12, 2023
• arista eos For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of… CVE-2021-28510 5.3 MediumJanuary 24, 2023
• arista eos This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if… CVE-2021-28511 5.8 MediumAugust 5, 2022
• arista eos, terminattr +1 more TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP CVE-2021-28509 6.1 MediumMay 26, 2022
• arista eos, terminattr +1 more TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP CVE-2021-28508 6.8 MediumMay 26, 2022
• arista eos On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access… CVE-2021-28505 7.5 HighApril 14, 2022
• arista eos On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declar… CVE-2021-28504 7.5 HighApril 1, 2022
• arista eos In Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI. CVE-2021-28503 7.4 HighFebruary 4, 2022
• arista eos An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users… CVE-2021-28500 9.1 CriticalJanuary 14, 2022
• arista eos An issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the deni… CVE-2021-28507 5.5 MediumJanuary 14, 2022
• arista eos An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device. CVE-2021-28506 9.1 CriticalJanuary 14, 2022
• arista eos In Arista's EOS software affected releases, the shared secret profiles sensitive configuration might be leaked when displaying output over eAPI or other JSON outputs to authenticated users on the devi… CVE-2021-28496 5.7 MediumOctober 21, 2021
• dnsmasq, arista eos, debian linux +1 more +3 more A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check... CVE-2020-25686 Public exploitFix available 3.7 LowJanuary 19, 2021
• dnsmasq, arista eos, debian linux +1 more +3 more A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,... CVE-2020-25685 Fix available 3.7 LowJanuary 19, 2021
• dnsmasq, arista eos, debian linux +1 more +3 more A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,... CVE-2020-25684 Fix available 3.7 LowJanuary 19, 2021
• arista eos In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one... CVE-2020-15898 5.3 MediumDecember 28, 2020
• arista eos An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of... CVE-2020-24360 7.4 HighDecember 28, 2020
• arista eos In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP... CVE-2020-26569 5.9 MediumDecember 28, 2020
• arista eos Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24... CVE-2020-15897 7.5 HighOctober 26, 2020
• arista eos Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24... CVE-2020-17355 7.5 HighOctober 21, 2020
• arista veos, cloudeos +1 more A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x... CVE-2020-11622 7.5 HighJune 10, 2020
• arista eos An issue was found in Arista EOS. Specific malformed ARP packets can impact the software... CVE-2019-18948 7.5 HighApril 16, 2020
• netkit telnet project telnet, arista eos, debian linux +3 more +5 more utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary... CVE-2020-10188 Fix available EPSS 74.3% 9.8 CriticalMarch 6, 2020
• golang go, arista cloudvision portal, eos +8 more +10 more Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic... CVE-2019-17596 Public exploitFix available 7.5 HighOctober 24, 2019
• arista eos Arista EOS through 4.21.0F allows a crash because 802.1x authentication is mishandled. CVE-2018-14008 6.5 MediumAugust 15, 2019
• arista eos Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart... CVE-2018-5254 7.5 HighApril 12, 2018
• arista eos The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers... CVE-2018-5255 6.5 MediumMarch 5, 2018
• debian linux, linux kernel, arista eos +26 more +28 more The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,... CVE-2017-18017 Fix available EPSS 52.8% 9.8 CriticalJanuary 3, 2018
• thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 more Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of... CVE-2017-14491 Public exploitFix available EPSS 86.5% 9.8 CriticalOctober 2, 2017
• arista dcs-7050q eos software, dcs-7050s eos software, dcs-7050t eos software +2 more Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series... CVE-2016-6894 7.5 HighJanuary 4, 2017
• arista eos Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and... CVE-2015-8236 10.0 HighNovember 19, 2015
• qemu, arista eos, canonical ubuntu linux +1 more +3 more The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a... CVE-2015-5278 Fix available 6.5 MediumSeptember 15, 2015
• qemu, arista eos, canonical ubuntu linux +4 more +6 more hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which... CVE-2015-6855 Fix available 7.5 HighSeptember 11, 2015
• qemu, arista eos, canonical ubuntu linux +8 more +10 more The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process... CVE-2015-6815 Fix available 3.5 LowSeptember 8, 2015
• qemu, arista eos, canonical ubuntu linux +5 more +7 more Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a... CVE-2015-5239 Fix available 6.5 MediumSeptember 3, 2015
• xen, arista eos, debian linux +20 more +22 more The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4... CVE-2015-5165 Fix available EPSS 13.3% 9.3 HighAugust 11, 2015
• qemu, arista eos, fedoraproject fedora +2 more Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2... CVE-2015-5745 Fix available 6.5 MediumAugust 6, 2015
• debian linux, linux kernel, qemu +16 more +18 more The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not... CVE-2015-3214 Public exploitFix available 6.9 MediumJune 17, 2015
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function... CVE-2014-7169 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalSeptember 25, 2014
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 processes trailing strings after function definitions in the values of... CVE-2014-6271 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalSeptember 24, 2014
• qemu, arista eos, canonical ubuntu linux +15 more +17 more Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute... CVE-2015-3209 Fix available 7.5 HighAugust 31, 2012