4.3
CVE-2024-7095
- EPSS 0.06%
- Published 10.01.2025 21:15:13
- Last modified 14.01.2025 15:15:27
- Source psirt@arista.com
- Teams watchlist Login
- Open Login
On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated (causing SNMP requests to time out until snmpd is restarted) and memory pressure for other processes on the switch. Increased memory pressure can cause processes other than snmpd to be at risk for unexpected termination as well.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users. Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorArista Networks
≫
Product
EOS
Default Statusunaffected
Version <=
4.32.2F
Version
4.32.0F
Status
affected
Version <=
4.31.4M
Version
4.31.0M
Status
affected
Version <=
4.30.7M
Version
4.30.0M
Status
affected
Version
4.29.0
Status
affected
Version
4.28.0
Status
affected
Version
4.27.0
Status
affected
Version
4.26.0
Status
affected
Version
4.25.0
Status
affected
Version
4.24.0
Status
affected
Version
4.23.0
Status
affected
Version
4.22.0
Status
affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.191 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| psirt@arista.com | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
|
CWE-401 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.