Description
Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| EOS | Arista Networks / EOS | >= *, <= 4.30 | affected |
| EOS | Arista Networks / EOS | >= 4.31.0, <= 4.31 | affected |
| EOS | Arista Networks / EOS | >= 4.32.0, <= 4.32 | affected |
| EOS | Arista Networks / EOS | >= 4.33.0, <= 4.33 | affected |
| EOS | Arista Networks / EOS | >= 4.34.0, <= 4.34 | affected |
| EOS | Arista Networks / EOS | >= 4.35.0, <= 4.35 | affected |
| EOS | Arista Networks / EOS | 4.36.0 | affected |