cbcvebase.
CVE-2024-7095
published 2025-01-10

CVE-2024-7095: On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted…

PriorityP422medium4.3CVSS 3.1
AVNACLPRLUINSUCNINAL
EPSS
0.46%
36.8th percentile
On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated (causing SNMP requests to time out until snmpd is restarted) and memory pressure for other processes on the switch. Increased memory pressure can cause processes other than snmpd to be at risk for unexpected termination as well.

Affected

11 ranges
VendorProductVersion rangeFixed in
arista_networkseos——
arista_networkseos——
arista_networkseos——
arista_networkseos——
arista_networkseos——
arista_networkseos——
arista_networkseos——
arista_networkseos——
arista_networkseos4.30.0M – 4.30.7M—
arista_networkseos4.31.0M – 4.31.4M—
arista_networkseos4.32.0F – 4.32.2F—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.