CVE-2018-5254: Arista Eos

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDATE message.

Affected products

• Arista Eos: before 4.20.2f (fixed in 4.20.2f)

Published 2018-04-12. Last modified 2026-06-17.