Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

arista eos 4.14 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2015-5745
Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU prior to 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
Qemu QemuFedoraproject Fedora 21Fedoraproject Fedora 22Fedoraproject Fedora 23Arista Eos 4.12Arista Eos 4.13Arista Eos 4.14Arista Eos 4.15
NA
CVE-2015-8236
Arista EOS prior to 4.11.12, 4.12 prior to 4.12.11, 4.13 prior to 4.13.14M, 4.14 prior to 4.14.5FX.5, and 4.15 prior to 4.15.0FX1.1 allows remote malicious users to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.
Arista Eos 4.12.8.1Arista Eos 4.12.10Arista Eos 4.13.4.1fArista Eos 4.13.5.1fArista Eos 4.13.9.1mArista Eos 4.13.11mArista Eos 4.14.2fArista Eos 4.14.3.1fArista Eos 4.14.5fx.2Arista Eos 4.14.5fx.4Arista Eos 4.14.9Arista Eos 4.15.0fxArista Eos 4.15.1fx-7060xArista Eos 4.15.2fArista EosArista Eos 4.12.8Arista Eos 4.13.6Arista Eos 4.13.7mArista Eos 4.13.7.2mArista Eos 4.13.7.3mArista Eos 4.13.8mArista Eos 4.14.4.1f
6.5
CVSSv3
CVE-2015-5278
The ne2000_receive function in hw/net/ne2000.c in QEMU prior to 2.4.0.1 allows malicious users to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
Qemu QemuFedoraproject Fedora 21Fedoraproject Fedora 22Fedoraproject Fedora 23Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Arista Eos 4.12Arista Eos 4.13Arista Eos 4.14Arista Eos 4.15
6.5
CVSSv3
CVE-2015-5239
Integer overflow in the VNC display driver in QEMU prior to 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
Qemu QemuFedoraproject Fedora 22Fedoraproject Fedora 23Fedoraproject Fedora 21Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Suse Linux Enterprise Server 11Suse Linux Enterprise Desktop 11Suse Linux Enterprise Debuginfo 11Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Desktop 12Arista Eos 4.15Arista Eos 4.14Arista Eos 4.13Arista Eos 4.12
3.5
CVSSv3
CVE-2015-6815
The process_tx_desc function in hw/net/e1000.c in QEMU prior to 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows malicious users to cause a denial of service (infinite loop and guest crash) via unspecified vectors.
Qemu QemuFedoraproject Fedora 22Fedoraproject Fedora 23Fedoraproject Fedora 21Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Desktop 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Openstack 5.0Redhat Openstack 7.0Redhat Enterprise Linux 5.0Redhat Openstack 6.0Xen Xen 4.4.3Xen Xen 4.5.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook