4.3
CVE-2024-7095
- EPSS 0.06%
- Veröffentlicht 10.01.2025 21:15:13
- Zuletzt bearbeitet 14.01.2025 15:15:27
- Quelle psirt@arista.com
- Teams Watchlist Login
- Unerledigt Login
On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated (causing SNMP requests to time out until snmpd is restarted) and memory pressure for other processes on the switch. Increased memory pressure can cause processes other than snmpd to be at risk for unexpected termination as well.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerArista Networks
≫
Produkt
EOS
Default Statusunaffected
Version <=
4.32.2F
Version
4.32.0F
Status
affected
Version <=
4.31.4M
Version
4.31.0M
Status
affected
Version <=
4.30.7M
Version
4.30.0M
Status
affected
Version
4.29.0
Status
affected
Version
4.28.0
Status
affected
Version
4.27.0
Status
affected
Version
4.26.0
Status
affected
Version
4.25.0
Status
affected
Version
4.24.0
Status
affected
Version
4.23.0
Status
affected
Version
4.22.0
Status
affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.191 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@arista.com | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
|
CWE-401 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.