On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Arista Networks | Arista EOS | affected |
|
Configuration 1 [-]
| AND |
|
No data.
No data available yet.
Vendor Solution
CVE-2023-24510 has been fixed in the following releases: - 4.29.2F and later releases in the 4.29.x train - 4.28.7M and later releases in the 4.28.x train - 4.27.10M and later releases in the 4.27.x train - 4.26.10M and later releases in the 4.26.x train
Vendor Workaround
The hotfix https://www.arista.com/support/advisories-notices/sa-download?sa=87-SecurityAdvisory87_Hotfix.swix can be used to remediate CVE-2023-24510. The hotfix only applies to the releases listed below and no other releases: - 4.29.1F and below releases in the 4.29.x train - 4.28.6.1M and below releases in the 4.28.x train - 4.27.9M and below releases in the 4.27.x train - 4.26.9M and below releases in the 4.26.x train - 4.25.10M and below releases in the 4.25.x train
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-28528 | On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart. |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.616% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|