Arista Update
3153Warning Date
Severity Level
Warning Number
Target Sector
4 June, 2020
● High
2020-1317
All
Description:
Arista has released security update to address a vulnerability in the following product:
- CloudEOS VM /vEOS Router
- 4.23.2M and below releases in the 4.23.x train
- 4.22.4M and below releases in the 4.22.x train
- 4.21.3M to 4.21.9M releases in the 4.21.x train
- Special releases:
- 4.21.3FX-7368.*, 4.21.4-FCRFX.*, 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, 4.23.2.1
Threats:
The vulnerability can lead to an impact on traffic forwarding if a specific malformed TCP packet is delivered over the data plane.
Best practice and Recommendations:
The CERT team encourages users to review Arista security advisory and apply the necessary updates: