CVE-2019-14810

A vulnerability has been found in the implementation of the Label Distribution Protocol (LDP) protocol in EOS. Under race conditions, the LDP agent can establish an LDP session with a malicious peer potentially allowing the possibility of a Denial of Service (DoS) attack on route updates and in turn potentially leading to an Out of Memory (OOM) condition that is disruptive to traffic forwarding. Affected EOS versions include: 4.22 release train: 4.22.1F and earlier releases 4.21 release train: 4.21.0F - 4.21.2.3F, 4.21.3F - 4.21.7.1M 4.20 release train: 4.20.14M and earlier releases 4.19 release train: 4.19.12M and earlier releases End of support release trains (4.18 and 4.17)

• CWE-362

• https://www.arista.com/en/support/advisories-noticesVendor Advisory
• https://www.arista.com/en/support/advisories-notices/security-advisories/8321-security-advisory-42Vendor Advisory
• https://www.arista.com/en/support/advisories-noticesVendor Advisory
• https://www.arista.com/en/support/advisories-notices/security-advisories/8321-security-advisory-42Vendor Advisory

Published

Oct 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14805studio/builder_menu.php?page=sets in UNA 10.0.0-RC1 allows X…
• CVE-2019-14806Pallets Werkzeug before 0.15.3, when used with Docker, has i…7.5
• CVE-2019-14807In the MobileFrontend extension 1.31 through 1.33 for MediaW…6.1
• CVE-2019-14808An issue was discovered in the RENPHO application 3.0.0 for …6.8
• CVE-2019-14809net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishan…
• CVE-2019-1481An information disclosure vulnerability exists in Windows Me…4.3
• CVE-2019-14811A flaw was found in, ghostscript versions prior to 9.50, in …7.8
• CVE-2019-14812A flaw was found in all ghostscript versions 9.x before 9.50…7.8
• CVE-2019-14813A flaw was found in ghostscript, versions 9.x before 9.50, i…9.8
• CVE-2019-14814There is heap-based buffer overflow in Linux kernel, all ver…7.8
• CVE-2019-14815A vulnerability was found in Linux Kernel, where a Heap Over…7.8
• CVE-2019-14816There is heap-based buffer overflow in kernel, all versions …7.8