Arista EOS (VxLAN agent): Malformed ARP packets crash the VxLAN software forwarding agent

CVE-2019-18948Firmware, BMC & network fabriccurated

Impact

Malformed ARP packets crash the VxLAN software forwarding agent — a tenant VM can take down overlay forwarding

Who can reach it

Network, from inside a tenant VLAN

What to do

EOS upgrade with failover; notable because the trigger comes from tenant traffic, not the management plane

References

https://nvd.nist.gov/vuln/detail/CVE-2019-18948

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.