Vulnerabilities > Arista > EOS > 4.21.0f

DATE CVE VULNERABILITY TITLE RISK
2020-10-21 CVE-2020-17355 Unspecified vulnerability in Arista EOS
Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DHCP packet which leads to an incorrect route being installed.
network
arista
4.3
2020-04-16 CVE-2019-18948 Improper Input Validation vulnerability in Arista EOS
An issue was found in Arista EOS.
network
low complexity
arista CWE-20
5.0
2020-03-06 CVE-2020-10188 Classic Buffer Overflow vulnerability in multiple products
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
9.8
2019-10-24 CVE-2019-17596 Interpretation Conflict vulnerability in multiple products
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key.
7.5
2019-08-15 CVE-2018-14008 Improper Authentication vulnerability in Arista EOS
Arista EOS through 4.21.0F allows a crash because 802.1x authentication is mishandled.
low complexity
arista CWE-287
3.3