security-advisory-0042

This advisory documents a security vulnerability identified internally by Arista Networks in the implementation of the Label Distribution Protocol (LDP) protocol in EOS. Under race conditions, the LDP agent can establish an LDP session with a malicious peer potentially allowing the possibility of a Denial of Service (DoS) attack on route updates and in turn potentially leading to an Out of Memory (OOM) condition that is disruptive to traffic forwarding. Arista has not received evidence of this vulnerability being exploited, as of the date of this update.