Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

arista eos 4.15 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2019-18948
An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow malicious users to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases i...
Arista Eos 4.15Arista Eos 4.16Arista Eos 4.17Arista Eos 4.18Arista Eos 4.19Arista Eos 4.20Arista Eos
7.5
CVSSv3
CVE-2016-6894
Arista EOS 4.15 prior to 4.15.8M, 4.16 prior to 4.16.7M, and 4.17 prior to 4.17.0F on DCS-7050 series devices allow remote malicious users to cause a denial of service (device reboot) by sending crafted packets to the control plane.
Arista Dcs-7050t Eos SoftwareArista Dcs-7050q Eos SoftwareArista Dcs-7050s Eos Software
6.5
CVSSv3
CVE-2015-5278
The ne2000_receive function in hw/net/ne2000.c in QEMU prior to 2.4.0.1 allows malicious users to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
Qemu QemuFedoraproject Fedora 21Fedoraproject Fedora 22Fedoraproject Fedora 23Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Arista Eos 4.12Arista Eos 4.13Arista Eos 4.14Arista Eos 4.15
6.5
CVSSv3
CVE-2015-5239
Integer overflow in the VNC display driver in QEMU prior to 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
Qemu QemuFedoraproject Fedora 22Fedoraproject Fedora 23Fedoraproject Fedora 21Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Suse Linux Enterprise Server 11Suse Linux Enterprise Desktop 11Suse Linux Enterprise Debuginfo 11Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Desktop 12Arista Eos 4.15Arista Eos 4.14Arista Eos 4.13Arista Eos 4.12
6.5
CVSSv3
CVE-2015-5745
Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU prior to 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
Qemu QemuFedoraproject Fedora 21Fedoraproject Fedora 22Fedoraproject Fedora 23Arista Eos 4.12Arista Eos 4.13Arista Eos 4.14Arista Eos 4.15
3.5
CVSSv3
CVE-2015-6815
The process_tx_desc function in hw/net/e1000.c in QEMU prior to 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows malicious users to cause a denial of service (infinite loop and guest crash) via unspecified vectors.
Qemu QemuFedoraproject Fedora 22Fedoraproject Fedora 23Fedoraproject Fedora 21Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Desktop 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Openstack 5.0Redhat Openstack 7.0Redhat Enterprise Linux 5.0Redhat Openstack 6.0Xen Xen 4.4.3Xen Xen 4.5.1
NA
CVE-2015-8236
Arista EOS prior to 4.11.12, 4.12 prior to 4.12.11, 4.13 prior to 4.13.14M, 4.14 prior to 4.14.5FX.5, and 4.15 prior to 4.15.0FX1.1 allows remote malicious users to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716.
Arista Eos 4.12.8.1Arista Eos 4.12.10Arista Eos 4.13.4.1fArista Eos 4.13.5.1fArista Eos 4.13.9.1mArista Eos 4.13.11mArista Eos 4.14.2fArista Eos 4.14.3.1fArista Eos 4.14.5fx.2Arista Eos 4.14.5fx.4Arista Eos 4.14.9Arista Eos 4.15.0fxArista Eos 4.15.1fx-7060xArista Eos 4.15.2fArista EosArista Eos 4.12.8Arista Eos 4.13.6Arista Eos 4.13.7mArista Eos 4.13.7.2mArista Eos 4.13.7.3mArista Eos 4.13.8mArista Eos 4.14.4.1f
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook