CVE-2023-24511CWE-401

On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process.

Medium · published April 12, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00836 · 57.3th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2023-04-12T00:00Z
EPSS history
Timeline
  • 12 APR 00:00Z
    On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process.
    cvelistv5