CVE-2021-28510
26.01.2023, 21:15
For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.Enginsight
| Vendor | Product | Version |
|---|---|---|
| arista | eos | 𝑥 < 4.23.10 |
| arista | eos | 4.24.0 ≤ 𝑥 < 4.24.8 |
| arista | eos | 4.25.0 ≤ 𝑥 < 4.25.6 |
| arista | eos | 4.26.0 ≤ 𝑥 < 4.26.4 |
| arista | eos | 4.27.0 ≤ 𝑥 < 4.27.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
- CWE-1284 - Improper Validation of Specified Quantity in InputThe product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.