Riskcovery

CVE-2024-6437

On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options ma

State
Published
Severity
5.8 Medium
Published
Jan 10, 2025
Updated
Jan 10, 2025
Reserved
Jul 1, 2024

Read the record on cve.org

Description

On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may bypass the feature's set nexthop action and be slow-path forwarded (FIB routed) by the kernel as the packets are trapped to the CPU instead of following the redirect action's destination.

Scores

CVSSScoreVectorSource
3.15.8 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:LArista

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
EOS-Policy Based Routing (PBR)Arista Networks
  • 4.32.0F through 4.32.1FAffected
  • 4.31.0M through 4.31.4MAffected
  • 4.30.0M through 4.30.7MAffected
  • 4.29.0M through 4.29.9MAffected
  • 4.28.0M through 4.28.11MAffected
  • 4.27.0M through 4.27.12MAffected
  • 4.26.0M through 4.26.14MAffected
  • 4.25.0M through 4.25.11MAffected
  • 4.24.0M through 4.24.11MAffected
  • 4.23.0M through 4.23.15MAffected
  • 4.22.0M through 4.22.13MAffected
  • 4.21.0M through 4.21.15MAffected
EOS - BGP FlowspecArista Networks
  • 4.32.0F through 4.32.1FAffected
  • 4.31.0M through 4.31.4MAffected
  • 4.30.0M through 4.30.7MAffected
  • 4.29.0M through 4.29.9MAffected
  • 4.28.0M through 4.28.11MAffected
  • 4.27.0M through 4.27.12MAffected
  • 4.26.0M through 4.26.14MAffected
  • 4.25.0M through 4.25.11MAffected
  • 4.24.0M through 4.24.11MAffected
  • 4.23.0M through 4.23.15MAffected
  • 4.22.0M through 4.22.13MAffected
  • 4.21.3F through 4.21.15MAffected
EOS - Interface Traffic PolicyArista Networks
  • 4.32.0F through 4.32.1FAffected
  • 4.31.0M through 4.31.4MAffected
  • 4.30.0M through 4.30.7MAffected
  • 4.29.0M through 4.29.9MAffected
  • 4.28.0M through 4.28.11MAffected
  • 4.27.2F through 4.27.12FAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.