CVE-2019-18948 (GCVE-0-2019-18948)

Vulnerability from cvelistv5 – Published: 2020-04-16 16:52 – Updated: 2024-08-05 02:02
VLAI
Summary
An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M and below releases in the 4.22.x train, 4.23.1F and below releases in the 4.23.x train, and all releases in 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 code train.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:02:39.867Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/10292-security-advisory-47"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista\u2019s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M and below releases in the 4.22.x train, 4.23.1F and below releases in the 4.23.x train, and all releases in 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 code train."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-16T16:52:56.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/10292-security-advisory-47"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-18948",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista\u2019s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M and below releases in the 4.22.x train, 4.23.1F and below releases in the 4.23.x train, and all releases in 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 code train."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.arista.com/en/support/advisories-notices/security-advisories/10292-security-advisory-47",
              "refsource": "CONFIRM",
              "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/10292-security-advisory-47"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-18948",
    "datePublished": "2020-04-16T16:52:56.000Z",
    "dateReserved": "2019-11-13T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:02:39.867Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2019-18948",
      "date": "2026-07-18",
      "epss": "0.01044",
      "percentile": "0.60277"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.21.0\", \"versionEndIncluding\": \"4.21.8m\", \"matchCriteriaId\": \"0F8BCF4B-F2AE-4E98-AF4C-3A0663D474CD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.22.0\", \"versionEndIncluding\": \"4.22.3m\", \"matchCriteriaId\": \"5B4B4E99-29DF-46A3-B504-43F09F4D000B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.23.0\", \"versionEndIncluding\": \"4.23.1f\", \"matchCriteriaId\": \"A82FB6CA-092F-49C1-863D-AA07E6C3F245\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arista:eos:4.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8705CF80-DEFC-4425-8E23-D98FFD678157\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arista:eos:4.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"045E5867-6089-4735-BD48-BBFC12EF27E5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arista:eos:4.17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D173671D-2339-4998-BA30-E0B0B7B6A967\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arista:eos:4.18:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B4751406-01B9-4992-9650-4400A9A39DCD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arista:eos:4.19:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"42513A2E-1717-4EE7-8AC3-27595F0B2914\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:arista:eos:4.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"71DFC595-50EA-4879-930E-FC68B9BE996B\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista\\u2019s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M and below releases in the 4.22.x train, 4.23.1F and below releases in the 4.23.x train, and all releases in 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 code train.\"}, {\"lang\": \"es\", \"value\": \"Se encontr\\u00f3 un problema en Arista EOS. Los paquetes ARP malformados espec\\u00edficos pueden afectar el reenv\\u00edo de software de los paquetes VxLAN. Este problema se encuentra en el c\\u00f3digo EOS VxLAN de Arista, que puede permitir a los atacantes bloquear el agente VxlanSwFwd. Esto afecta a EOS 4.21.8M y versiones  anteriores  en el tren 4.21.x, 4.22.3M y versiones anteriores  en el tren 4.22.x, 4.23.1F y versiones anteriores  en el tren 4.23.x, y todas las versiones en 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 tren de c\\u00f3digo\"}]",
      "id": "CVE-2019-18948",
      "lastModified": "2024-11-21T04:33:53.790",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2020-04-16T19:15:22.383",
      "references": "[{\"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisories/10292-security-advisory-47\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisories/10292-security-advisory-47\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2019-18948\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2020-04-16T19:15:22.383\",\"lastModified\":\"2024-11-21T04:33:53.790\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista\u2019s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M and below releases in the 4.22.x train, 4.23.1F and below releases in the 4.23.x train, and all releases in 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 code train.\"},{\"lang\":\"es\",\"value\":\"Se encontr\u00f3 un problema en Arista EOS. Los paquetes ARP malformados espec\u00edficos pueden afectar el reenv\u00edo de software de los paquetes VxLAN. Este problema se encuentra en el c\u00f3digo EOS VxLAN de Arista, que puede permitir a los atacantes bloquear el agente VxlanSwFwd. Esto afecta a EOS 4.21.8M y versiones  anteriores  en el tren 4.21.x, 4.22.3M y versiones anteriores  en el tren 4.22.x, 4.23.1F y versiones anteriores  en el tren 4.23.x, y todas las versiones en 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 tren de c\u00f3digo\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.21.0\",\"versionEndIncluding\":\"4.21.8m\",\"matchCriteriaId\":\"0F8BCF4B-F2AE-4E98-AF4C-3A0663D474CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.22.0\",\"versionEndIncluding\":\"4.22.3m\",\"matchCriteriaId\":\"5B4B4E99-29DF-46A3-B504-43F09F4D000B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.23.0\",\"versionEndIncluding\":\"4.23.1f\",\"matchCriteriaId\":\"A82FB6CA-092F-49C1-863D-AA07E6C3F245\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:4.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8705CF80-DEFC-4425-8E23-D98FFD678157\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:4.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"045E5867-6089-4735-BD48-BBFC12EF27E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:4.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D173671D-2339-4998-BA30-E0B0B7B6A967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:4.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4751406-01B9-4992-9650-4400A9A39DCD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:4.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42513A2E-1717-4EE7-8AC3-27595F0B2914\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:4.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71DFC595-50EA-4879-930E-FC68B9BE996B\"}]}]}],\"references\":[{\"url\":\"https://www.arista.com/en/support/advisories-notices/security-advisories/10292-security-advisory-47\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://www.arista.com/en/support/advisories-notices/security-advisories/10292-security-advisory-47\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.