mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
48 lines
2.2 KiB
JSON
48 lines
2.2 KiB
JSON
{
|
|
"id": "CVE-2024-6437",
|
|
"sourceIdentifier": "psirt@arista.com",
|
|
"published": "2025-01-10T20:15:30.817",
|
|
"lastModified": "2025-01-10T20:15:30.817",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may bypass the feature's set nexthop\u00a0action and be slow-path forwarded (FIB routed) by the kernel as the packets are trapped to the CPU instead of following the redirect action's destination."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "En las plataformas afectadas que ejecutan Arista EOS con una de las siguientes funciones configuradas para redirigir el tr\u00e1fico IP a un siguiente salto: enrutamiento basado en pol\u00edticas (PBR), BGP Flowspec o pol\u00edtica de tr\u00e1fico de interfaz, cierto tr\u00e1fico IP, como los paquetes IPv4 con opciones IP, pueden omitir la acci\u00f3n de siguiente salto establecida por la funci\u00f3n y ser reenviados por ruta lenta (enrutados FIB) por el kernel a medida que los paquetes quedan atrapados en la CPU en lugar de seguir el destino de la acci\u00f3n de redirecci\u00f3n."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "psirt@arista.com",
|
|
"type": "Secondary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
|
|
"baseScore": 5.8,
|
|
"baseSeverity": "MEDIUM",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "NONE",
|
|
"scope": "CHANGED",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "LOW"
|
|
},
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 1.4
|
|
}
|
|
]
|
|
},
|
|
"references": [
|
|
{
|
|
"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/20689-security-advisory-0108",
|
|
"source": "psirt@arista.com"
|
|
}
|
|
]
|
|
} |