CVEvulnerability

CVE-2023-24511

7.5 HIGH Published 2023-04-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-04-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-401

Description

On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system.

Affected configurations

• arista eos (>= 4.26.0 < 4.26.10m) • arista eos (>= 4.27.0 < 4.27.9m) • arista eos (>= 4.28.0 < 4.28.6m) • arista eos (>= 4.29.0 < 4.29.2f)

Related

Weakness · CWE (1)

  • CWE-401 Missing Release of Memory after Effective Lifetime weakness

References