{ "document": { "category": "security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en-US", "publisher": { "category": "vendor", "contact_details": "support@arista.com", "name": "Arista PSIRT", "namespace": "https://www.arista.com" }, "references": [ { "category": "self", "summary": "Security advisory 85 canonical URL", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085" } ], "title": "Security Advisory 85", "tracking": { "current_release_date": "2023-04-13T21:00:57Z", "generator": { "engine": { "name": "Arista Networks SecEng Service CSAF Generator" } }, "id": "Arista Networks Security Advisory 85", "initial_release_date": "2023-04-13T21:00:57Z", "revision_history": [ { "date": "2023-04-13T21:00:57Z", "number": "1", "summary": "Document created" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "EOS version 4.27.4", "product": { "name": "EOS version 4.27.4", "product_id": "CSAFPID-22" } }, { "category": "product_version", "name": "EOS version 4.29.0.1", "product": { "name": "EOS version 4.29.0.1", "product_id": "CSAFPID-43" } }, { "category": "product_version", "name": "EOS version 4.27.7", "product": { "name": "EOS version 4.27.7", "product_id": "CSAFPID-27" } }, { "category": "product_version", "name": "EOS version 4.26.7", "product": { "name": "EOS version 4.26.7", "product_id": "CSAFPID-13" } }, { "category": "product_version", "name": "EOS version 4.26.4.1", "product": { "name": "EOS version 4.26.4.1", "product_id": "CSAFPID-9" } }, { "category": "product_version", "name": "EOS version 4.26.8", "product": { "name": "EOS version 4.26.8", "product_id": "CSAFPID-14" } }, { "category": "product_version", "name": "EOS version 4.27.0", "product": { "name": "EOS version 4.27.0", "product_id": "CSAFPID-16" } }, { "category": "product_version", "name": "EOS version 4.28.0.2", "product": { "name": "EOS version 4.28.0.2", "product_id": "CSAFPID-32" } }, { "category": "product_version", "name": "EOS version 4.27.3.1", "product": { "name": "EOS version 4.27.3.1", "product_id": "CSAFPID-21" } }, { "category": "product_version", "name": "EOS version 4.28.2.1", "product": { "name": "EOS version 4.28.2.1", "product_id": "CSAFPID-37" } }, { "category": "product_version", "name": "EOS version 4.27.2", "product": { "name": "EOS version 4.27.2", "product_id": "CSAFPID-19" } }, { "category": "product_version", "name": "EOS version 4.27.4.2", "product": { "name": "EOS version 4.27.4.2", "product_id": "CSAFPID-24" } }, { "category": "product_version", "name": "EOS version 4.28.1", "product": { "name": "EOS version 4.28.1", "product_id": "CSAFPID-34" } }, { "category": "product_version", "name": "EOS version 4.26.4.2", "product": { "name": "EOS version 4.26.4.2", "product_id": "CSAFPID-10" } }, { "category": "product_version", "name": "EOS version 4.27.3", "product": { "name": "EOS version 4.27.3", "product_id": "CSAFPID-20" } }, { "category": "product_version", "name": "EOS version 4.29.0", "product": { "name": "EOS version 4.29.0", "product_id": "CSAFPID-42" } }, { "category": "product_version", "name": "EOS version 4.29.0.2", "product": { "name": "EOS version 4.29.0.2", "product_id": "CSAFPID-44" } }, { "category": "product_version", "name": "EOS version 4.27.6", "product": { "name": "EOS version 4.27.6", "product_id": "CSAFPID-26" } }, { "category": "product_version", "name": "EOS version 4.27.9", "product": { "name": "EOS version 4.27.9", "product_id": "CSAFPID-91" } }, { "category": "product_version", "name": "EOS version 4.28.5", "product": { "name": "EOS version 4.28.5", "product_id": "CSAFPID-1" } }, { "category": "product_version", "name": "EOS version 4.28.0", "product": { "name": "EOS version 4.28.0", "product_id": "CSAFPID-30" } }, { "category": "product_version", "name": "EOS version 4.28.4", "product": { "name": "EOS version 4.28.4", "product_id": "CSAFPID-40" } }, { "category": "product_version", "name": "EOS version 4.22.0", "product": { "name": "EOS version 4.22.0", "product_id": "CSAFPID-88" } }, { "category": "product_version", "name": "EOS version 4.26.2.1", "product": { "name": "EOS version 4.26.2.1", "product_id": "CSAFPID-6" } }, { "category": "product_version", "name": "EOS version 4.21.3", "product": { "name": "EOS version 4.21.3", "product_id": "CSAFPID-3" } }, { "category": "product_version", "name": "EOS version 4.26.2", "product": { "name": "EOS version 4.26.2", "product_id": "CSAFPID-5" } }, { "category": "product_version", "name": "EOS version 4.27.4.1", "product": { "name": "EOS version 4.27.4.1", "product_id": "CSAFPID-23" } }, { "category": "product_version", "name": "EOS version 4.27.7.1", "product": { "name": "EOS version 4.27.7.1", "product_id": "CSAFPID-28" } }, { "category": "product_version", "name": "EOS version 4.28.6", "product": { "name": "EOS version 4.28.6", "product_id": "CSAFPID-90" } }, { "category": "product_version", "name": "EOS version 4.28.1.1", "product": { "name": "EOS version 4.28.1.1", "product_id": "CSAFPID-35" } }, { "category": "product_version", "name": "EOS version 4.27.1", "product": { "name": "EOS version 4.27.1", "product_id": "CSAFPID-17" } }, { "category": "product_version", "name": "EOS version 4.27.5", "product": { "name": "EOS version 4.27.5", "product_id": "CSAFPID-25" } }, { "category": "product_version", "name": "EOS version 4.26.9", "product": { "name": "EOS version 4.26.9", "product_id": "CSAFPID-0" } }, { "category": "product_version", "name": "EOS version 4.28.2.2", "product": { "name": "EOS version 4.28.2.2", "product_id": "CSAFPID-38" } }, { "category": "product_version", "name": "EOS version 4.28.0.1", "product": { "name": "EOS version 4.28.0.1", "product_id": "CSAFPID-31" } }, { "category": "product_version", "name": "EOS version 4.26.6", "product": { "name": "EOS version 4.26.6", "product_id": "CSAFPID-12" } }, { "category": "product_version", "name": "EOS version 4.26.4", "product": { "name": "EOS version 4.26.4", "product_id": "CSAFPID-8" } }, { "category": "product_version", "name": "EOS version 4.28.2", "product": { "name": "EOS version 4.28.2", "product_id": "CSAFPID-36" } }, { "category": "product_version", "name": "EOS version 4.27.1.1", "product": { "name": "EOS version 4.27.1.1", "product_id": "CSAFPID-18" } }, { "category": "product_version", "name": "EOS version 4.27.8", "product": { "name": "EOS version 4.27.8", "product_id": "CSAFPID-2" } }, { "category": "product_version", "name": "EOS version 4.26.3", "product": { "name": "EOS version 4.26.3", "product_id": "CSAFPID-7" } }, { "category": "product_version", "name": "EOS version 4.29.1", "product": { "name": "EOS version 4.29.1", "product_id": "CSAFPID-45" } }, { "category": "product_version", "name": "EOS version 4.26.5", "product": { "name": "EOS version 4.26.5", "product_id": "CSAFPID-11" } }, { "category": "product_version", "name": "EOS version 4.28.0.3", "product": { "name": "EOS version 4.28.0.3", "product_id": "CSAFPID-33" } }, { "category": "product_version", "name": "EOS version 4.28.3", "product": { "name": "EOS version 4.28.3", "product_id": "CSAFPID-39" } }, { "category": "product_version", "name": "EOS version 4.29.2", "product": { "name": "EOS version 4.29.2", "product_id": "CSAFPID-4" } }, { "category": "product_version", "name": "EOS version 4.26.10", "product": { "name": "EOS version 4.26.10", "product_id": "CSAFPID-89" } } ], "category": "product_name", "name": "EOS" } ], "category": "product_family", "name": "Software Products" }, { "branches": [ { "category": "product_version", "name": "Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product": { "name": "Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-15" } }, { "category": "product_version", "name": "Hotfix SecurityAdvisory85_4.29_Hotfix.swix 1.0", "product": { "name": "Hotfix SecurityAdvisory85_4.29_Hotfix.swix 1.0", "product_id": "CSAFPID-46" } }, { "category": "product_version", "name": "Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product": { "name": "Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-41" } }, { "category": "product_version", "name": "Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product": { "name": "Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-29" } } ], "category": "product_family", "name": "Hotfixes" } ], "category": "vendor", "name": "Arista Networks, Inc." } ], "relationships": [ { "category": "installed_with", "full_product_name": { "name": "Version 4.28.1 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-76" }, "product_reference": "CSAFPID-34", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.8 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-71" }, "product_reference": "CSAFPID-2", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.1.1 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-60" }, "product_reference": "CSAFPID-18", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.7 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-55" }, "product_reference": "CSAFPID-13", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.2.1 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-48" }, "product_reference": "CSAFPID-6", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.1 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-59" }, "product_reference": "CSAFPID-17", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.4 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-82" }, "product_reference": "CSAFPID-40", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.7 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-69" }, "product_reference": "CSAFPID-27", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.3.1 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-63" }, "product_reference": "CSAFPID-21", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.4.1 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-65" }, "product_reference": "CSAFPID-23", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.5 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-53" }, "product_reference": "CSAFPID-11", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.2 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-78" }, "product_reference": "CSAFPID-36", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.3 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-81" }, "product_reference": "CSAFPID-39", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.4 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-50" }, "product_reference": "CSAFPID-8", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.0.3 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-75" }, "product_reference": "CSAFPID-33", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.0 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-58" }, "product_reference": "CSAFPID-16", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.3 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-49" }, "product_reference": "CSAFPID-7", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.29.0.1 with Hotfix SecurityAdvisory85_4.29_Hotfix.swix 1.0", "product_id": "CSAFPID-85" }, "product_reference": "CSAFPID-43", "relates_to_product_reference": "CSAFPID-46" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.4.2 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-52" }, "product_reference": "CSAFPID-10", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.2 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-61" }, "product_reference": "CSAFPID-19", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.6 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-54" }, "product_reference": "CSAFPID-12", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.2 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-47" }, "product_reference": "CSAFPID-5", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.7.1 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-70" }, "product_reference": "CSAFPID-28", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.0.1 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-73" }, "product_reference": "CSAFPID-31", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.8 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-56" }, "product_reference": "CSAFPID-14", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.9 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-57" }, "product_reference": "CSAFPID-0", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.26.4.1 with Hotfix SecurityAdvisory85_4.26_Hotfix.swix 1.0", "product_id": "CSAFPID-51" }, "product_reference": "CSAFPID-9", "relates_to_product_reference": "CSAFPID-15" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.29.1 with Hotfix SecurityAdvisory85_4.29_Hotfix.swix 1.0", "product_id": "CSAFPID-87" }, "product_reference": "CSAFPID-45", "relates_to_product_reference": "CSAFPID-46" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.4.2 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-66" }, "product_reference": "CSAFPID-24", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.29.0 with Hotfix SecurityAdvisory85_4.29_Hotfix.swix 1.0", "product_id": "CSAFPID-84" }, "product_reference": "CSAFPID-42", "relates_to_product_reference": "CSAFPID-46" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.5 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-67" }, "product_reference": "CSAFPID-25", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.0.2 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-74" }, "product_reference": "CSAFPID-32", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.4 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-64" }, "product_reference": "CSAFPID-22", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.0 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-72" }, "product_reference": "CSAFPID-30", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.1.1 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-77" }, "product_reference": "CSAFPID-35", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.3 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-62" }, "product_reference": "CSAFPID-20", "relates_to_product_reference": "CSAFPID-29" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.29.0.2 with Hotfix SecurityAdvisory85_4.29_Hotfix.swix 1.0", "product_id": "CSAFPID-86" }, "product_reference": "CSAFPID-44", "relates_to_product_reference": "CSAFPID-46" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.5 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-83" }, "product_reference": "CSAFPID-1", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.2.2 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-80" }, "product_reference": "CSAFPID-38", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.28.2.1 with Hotfix SecurityAdvisory85_4.28_Hotfix.swix 1.0", "product_id": "CSAFPID-79" }, "product_reference": "CSAFPID-37", "relates_to_product_reference": "CSAFPID-41" }, { "category": "installed_with", "full_product_name": { "name": "Version 4.27.6 with Hotfix SecurityAdvisory85_4.27_Hotfix.swix 1.0", "product_id": "CSAFPID-68" }, "product_reference": "CSAFPID-26", "relates_to_product_reference": "CSAFPID-29" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-24545", "id": { "system_name": "Arista Bug ID", "text": "743423" }, "notes": [ { "category": "description", "text": "On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic.", "title": "CVE Description" }, { "category": "other", "text": "CVE-2023-24545 and CVE-2023-24513\nIn order to be vulnerable to CVE-2023-24545 and CVE-2023-24513, the switch must be configured to run the Software Forwarding Engine (Sfe). Sfe is the default configuration on CloudEOS platforms. ", "title": "743423: Required Config for Exploitation" } ], "product_status": { "first_affected": [ "CSAFPID-3" ], "first_fixed": [ "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87" ], "fixed": [ "CSAFPID-0", "CSAFPID-1", "CSAFPID-2", "CSAFPID-4" ] }, "references": [ { "category": "external", "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24545" } ], "remediations": [ { "category": "vendor_fix", "details": "Fixed in EOS version 4.26.9", "product_ids": [ "CSAFPID-0" ] }, { "category": "vendor_fix", "details": "Fixed in EOS version 4.27.8", "product_ids": [ "CSAFPID-2" ] }, { "category": "vendor_fix", "details": "Fixed in EOS version 4.28.5", "product_ids": [ "CSAFPID-1" ] }, { "category": "vendor_fix", "details": "Fixed in EOS version 4.29.2", "product_ids": [ "CSAFPID-4" ] }, { "category": "none_available", "details": "Not fixed in EOS version 4.21.3", "product_ids": [ "CSAFPID-3" ] }, { "category": "mitigation", "details": "There is no mitigation / workaround for these issues." }, { "category": "mitigation", "details": "Hotfix: SecurityAdvisory85_4.26_Hotfix.swix, 1.0, Hash: (SHA-512)9386f12a24f35679bdeb08d506bf0bddb9703d1ef3043de2c06d09ff47f2dd0d1bd7aca0748febb5b04fbdeaed7c4ae2922086fb638c754c3a9a5384306396d2", "product_ids": [ "CSAFPID-5", "CSAFPID-8", "CSAFPID-0", "CSAFPID-13", "CSAFPID-7", "CSAFPID-6", "CSAFPID-10", "CSAFPID-9", "CSAFPID-11", "CSAFPID-12", "CSAFPID-14" ], "url": "https://www.arista.com/support/advisories-notices/sa-download/?sa=85-SecurityAdvisory85_4.26_Hotfix.swix" }, { "category": "mitigation", "details": "Hotfix: SecurityAdvisory85_4.27_Hotfix.swix, 1.0, Hash: (SHA-512)5ce5479c11abf185f50d484204555b2dfb9b1c93e8f475d027082ca0951cbfca0f331960a1dd111b8c079264b1dab31b0a62c8daf011afb27b1283c2382747a2", "product_ids": [ "CSAFPID-26", "CSAFPID-28", "CSAFPID-20", "CSAFPID-25", "CSAFPID-17", "CSAFPID-22", "CSAFPID-23", "CSAFPID-2", "CSAFPID-16", "CSAFPID-18", "CSAFPID-24", "CSAFPID-19", "CSAFPID-27", "CSAFPID-21" ], "url": "https://www.arista.com/support/advisories-notices/sa-download/?sa=85-SecurityAdvisory85_4.27_Hotfix.swix" }, { "category": "mitigation", "details": "Hotfix: SecurityAdvisory85_4.28_Hotfix.swix, 1.0, Hash: (SHA-512)522d51c6548111d9819ef8b1523b8798ac6847012955e3f885c6f466c81468960fbd4497b45289c8f77297263111340fbdbd7003a30b64e3ef9a270ace62c079", "product_ids": [ "CSAFPID-34", "CSAFPID-36", "CSAFPID-31", "CSAFPID-40", "CSAFPID-38", "CSAFPID-1", "CSAFPID-39", "CSAFPID-37", "CSAFPID-35", "CSAFPID-33", "CSAFPID-30", "CSAFPID-32" ], "url": "https://www.arista.com/support/advisories-notices/sa-download/?sa=85-SecurityAdvisory85_4.28_Hotfix.swix" }, { "category": "mitigation", "details": "Hotfix: SecurityAdvisory85_4.29_Hotfix.swix, 1.0, Hash: (SHA-512)c965e149cbbaa8698648af9290c5a728e9fe635186eee7629b789502ef37db4a94beea5ecd20e1dc8a19c2cc8988052b625cfccf764c28b8b0e9e4eef8e79bb4", "product_ids": [ "CSAFPID-44", "CSAFPID-42", "CSAFPID-43", "CSAFPID-45" ], "url": "https://www.arista.com/support/advisories-notices/sa-download/?sa=85-SecurityAdvisory85_4.29_Hotfix.swix" } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-4", "CSAFPID-0", "CSAFPID-3", "CSAFPID-2", "CSAFPID-1" ] } ], "title": "CVE-2023-24545" }, { "cve": "CVE-2023-24513", "id": { "system_name": "Arista Bug ID", "text": "764777" }, "notes": [ { "category": "description", "text": "On affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured options (e.g. MSS clamping), this may cause a recomputation of the TCP checksum on a very large buffer (64KB) instead of a very small one, which could be leveraged in DDoS attacks.\n", "title": "CVE Description" }, { "category": "other", "text": "In order to be vulnerable to CVE-2023-24545 and CVE-2023-24513, the switch must be configured to run the Software Forwarding Engine (Sfe). Sfe is the default configuration on CloudEOS platforms. \nswitch(config#show agent Sfe uptime\nAgent Name Restarts Uptime\n---------------- -------------- -------\nSfe 1 0:29:49\n\n", "title": "764777: Required Config for Exploitation" } ], "product_status": { "first_affected": [ "CSAFPID-88" ], "first_fixed": [ "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87" ], "fixed": [ "CSAFPID-4", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91" ] }, "references": [ { "category": "external", "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24513" } ], "remediations": [ { "category": "vendor_fix", "details": "Fixed in EOS version 4.26.10", "product_ids": [ "CSAFPID-89" ] }, { "category": "vendor_fix", "details": "Fixed in EOS version 4.27.9", "product_ids": [ "CSAFPID-91" ] }, { "category": "vendor_fix", "details": "Fixed in EOS version 4.28.6", "product_ids": [ "CSAFPID-90" ] }, { "category": "vendor_fix", "details": "Fixed in EOS version 4.29.2", "product_ids": [ "CSAFPID-4" ] }, { "category": "none_available", "details": "Not fixed in EOS version 4.22.0", "product_ids": [ "CSAFPID-88" ] }, { "category": "mitigation", "details": "There is no mitigation / workaround for these issues." }, { "category": "mitigation", "details": "Hotfix: SecurityAdvisory85_4.26_Hotfix.swix, 1.0, Hash: (SHA-512)9386f12a24f35679bdeb08d506bf0bddb9703d1ef3043de2c06d09ff47f2dd0d1bd7aca0748febb5b04fbdeaed7c4ae2922086fb638c754c3a9a5384306396d2", "product_ids": [ "CSAFPID-5", "CSAFPID-8", "CSAFPID-0", "CSAFPID-13", "CSAFPID-7", "CSAFPID-6", "CSAFPID-10", "CSAFPID-9", "CSAFPID-11", "CSAFPID-12", "CSAFPID-14" ], "url": "https://www.arista.com/support/advisories-notices/sa-download/?sa=85-SecurityAdvisory85_4.26_Hotfix.swix" }, { "category": "mitigation", "details": "Hotfix: SecurityAdvisory85_4.27_Hotfix.swix, 1.0, Hash: (SHA-512)5ce5479c11abf185f50d484204555b2dfb9b1c93e8f475d027082ca0951cbfca0f331960a1dd111b8c079264b1dab31b0a62c8daf011afb27b1283c2382747a2", "product_ids": [ "CSAFPID-26", "CSAFPID-28", "CSAFPID-20", "CSAFPID-25", "CSAFPID-17", "CSAFPID-22", "CSAFPID-23", "CSAFPID-2", "CSAFPID-16", "CSAFPID-18", "CSAFPID-24", "CSAFPID-19", "CSAFPID-27", "CSAFPID-21" ], "url": "https://www.arista.com/support/advisories-notices/sa-download/?sa=85-SecurityAdvisory85_4.27_Hotfix.swix" }, { "category": "mitigation", "details": "Hotfix: SecurityAdvisory85_4.28_Hotfix.swix, 1.0, Hash: (SHA-512)522d51c6548111d9819ef8b1523b8798ac6847012955e3f885c6f466c81468960fbd4497b45289c8f77297263111340fbdbd7003a30b64e3ef9a270ace62c079", "product_ids": [ "CSAFPID-34", "CSAFPID-36", "CSAFPID-31", "CSAFPID-40", "CSAFPID-38", "CSAFPID-1", "CSAFPID-39", "CSAFPID-37", "CSAFPID-35", "CSAFPID-33", "CSAFPID-30", "CSAFPID-32" ], "url": "https://www.arista.com/support/advisories-notices/sa-download/?sa=85-SecurityAdvisory85_4.28_Hotfix.swix" }, { "category": "mitigation", "details": "Hotfix: SecurityAdvisory85_4.29_Hotfix.swix, 1.0, Hash: (SHA-512)c965e149cbbaa8698648af9290c5a728e9fe635186eee7629b789502ef37db4a94beea5ecd20e1dc8a19c2cc8988052b625cfccf764c28b8b0e9e4eef8e79bb4", "product_ids": [ "CSAFPID-44", "CSAFPID-42", "CSAFPID-43", "CSAFPID-45" ], "url": "https://www.arista.com/support/advisories-notices/sa-download/?sa=85-SecurityAdvisory85_4.29_Hotfix.swix" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-4", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-88" ] } ], "title": "CVE-2023-24513" } ] }