CVE-2019-18948

published 2020-04-16

CVE-2019-18948: An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN…

Priority P3 38 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M and below releases in the 4.22.x train, 4.23.1F and below releases in the 4.23.x train, and all releases in 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 code train.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
arista	eos	—	—
arista	eos	—	—
arista	eos	—	—
arista	eos	—	—
arista	eos	—	—
arista	eos	—	—
arista	eos	4.21.0 – 4.21.8m	—
arista	eos	4.22.0 – 4.22.3m	—
arista	eos	4.23.0 – 4.23.1f	—

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20