Arista EOS (BGP UPDATE): Malformed path attribute in a BGP UPDATE from a peer causes denial of service

CVE-2018-5254Firmware, BMC & network fabriccurated

Impact

Malformed path attribute in a BGP UPDATE from a peer causes denial of service

Who can reach it

Network, from a BGP peer

What to do

EOS upgrade; relevant where the fabric peers with a transit provider or a customer-controlled router

References

https://nvd.nist.gov/vuln/detail/CVE-2018-5254

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.