QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-24511

Back to search

CVE-2023-24511

Published: Apr 12, 2023

Modified: Feb 7, 2025

PUBLISHED

CVSS v3.1

5.3

MEDIUM

Description

On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system.

VendorProductVersions

Arista Networks

EOS

affected
4.28.0 4.28.5.1M
affected
4.27.0 4.27.8.1M
affected
4.26.0 4.26.9M
affected
4.25.0 4.25.10M
affected
4.24.0 4.24.11M

+1 more versions

Weaknesses (CWE)

CWE-401

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now