CVE-2019-18948
Last modified
CVE-2019-18948 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. EPSS estimates a 1.04% chance of exploitation in the next 30 days.
Description
An issue was found in Arista EOS. Specific malformed ARP packets can impact the software forwarding of VxLAN packets. This issue is found in Arista’s EOS VxLAN code, which can allow attackers to crash the VxlanSwFwd agent. This affects EOS 4.21.8M and below releases in the 4.21.x train, 4.22.3M and below releases in the 4.22.x train, 4.23.1F and below releases in the 4.23.x train, and all releases in 4.15, 4.16, 4.17, 4.18, 4.19, 4.20 code train.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Arista | Eos | >= 4.21.0, <= 4.21.8m |
| Arista | Eos | >= 4.22.0, <= 4.22.3m |
| Arista | Eos | >= 4.23.0, <= 4.23.1f |
| Arista | Eos | 4.15 |
| Arista | Eos | 4.16 |
| Arista | Eos | 4.17 |
| Arista | Eos | 4.18 |
| Arista | Eos | 4.19 |
| Arista | Eos | 4.20 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-18948?
How severe is CVE-2019-18948?
How do I fix CVE-2019-18948?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-18942Micro Focus Solutions Business Manager versions prior to 11.…4.8
- CVE-2019-18943Micro Focus Solutions Business Manager versions prior to 11.…8
- CVE-2019-18944Micro Focus Solutions Business Manager Application Repositor…4.8
- CVE-2019-18945Micro Focus Solutions Business Manager Application Repositor…8
- CVE-2019-18946Micro Focus Solutions Business Manager Application Repositor…4.8
- CVE-2019-18947Micro Focus Solutions Business Manager Application Repositor…3.5
- CVE-2019-18949SnowHaze before 2.6.6 is sometimes too late to honor a per-s…7.5
- CVE-2019-1895A vulnerability in the Virtual Network Computing (VNC) conso…9.8
- CVE-2019-18951SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ d…7.5
- CVE-2019-18952SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arb…9.8
- CVE-2019-18954Pomelo v2.2.5 allows external control of critical state data…5.3
- CVE-2019-18955The web console in Lansweeper 7.2.105.2 has XSS via the URL …6.1
Are you affected by CVE-2019-18948?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST