Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2024-6437

On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options ma

Description

On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may bypass the feature's set nexthop action and be slow-path forwarded (FIB routed) by the kernel as the packets are trapped to the CPU instead of following the redirect action's destination.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks EOS-Policy Based Routing (PBR)

Default version status: unaffected

  • 4.32.0F to ≤ 4.32.1Faffected
  • 4.31.0M to ≤ 4.31.4Maffected
  • 4.30.0M to ≤ 4.30.7Maffected
  • 4.29.0M to ≤ 4.29.9Maffected
  • 4.28.0M to ≤ 4.28.11Maffected
  • 4.27.0M to ≤ 4.27.12Maffected
  • 4.26.0M to ≤ 4.26.14Maffected
  • 4.25.0M to ≤ 4.25.11Maffected
  • 4.24.0M to ≤ 4.24.11Maffected
  • 4.23.0M to ≤ 4.23.15Maffected
  • 4.22.0M to ≤ 4.22.13Maffected
  • 4.21.0M to ≤ 4.21.15Maffected

Arista Networks EOS - BGP Flowspec

Default version status: unaffected

  • 4.32.0F to ≤ 4.32.1Faffected
  • 4.31.0M to ≤ 4.31.4Maffected
  • 4.30.0M to ≤ 4.30.7Maffected
  • 4.29.0M to ≤ 4.29.9Maffected
  • 4.28.0M to ≤ 4.28.11Maffected
  • 4.27.0M to ≤ 4.27.12Maffected
  • 4.26.0M to ≤ 4.26.14Maffected
  • 4.25.0M to ≤ 4.25.11Maffected
  • 4.24.0M to ≤ 4.24.11Maffected
  • 4.23.0M to ≤ 4.23.15Maffected
  • 4.22.0M to ≤ 4.22.13Maffected
  • 4.21.3F to ≤ 4.21.15Maffected

Arista Networks EOS - Interface Traffic Policy

Default version status: unaffected

  • 4.32.0F to ≤ 4.32.1Faffected
  • 4.31.0M to ≤ 4.31.4Maffected
  • 4.30.0M to ≤ 4.30.7Maffected
  • 4.29.0M to ≤ 4.29.9Maffected
  • 4.28.0M to ≤ 4.28.11Maffected
  • 4.27.2F to ≤ 4.27.12Faffected

References