CVE-2023-24513: Arista Cloudeos

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic.

Affected products

• Arista Cloudeos: from 4.26.0, before 4.26.9m (fixed in 4.26.9m); from 4.27.0, before 4.27.8m (fixed in 4.27.8m); from 4.28.0, before 4.28.5m (fixed in 4.28.5m); from 4.29.0, before 4.29.2f (fixed in 4.29.2f)

Published 2023-04-12. Last modified 2026-06-17.