Security Advisory 0042
Description
This advisory documents a security vulnerability in the Label Distribution Protocol (LDP) implementation in Arista EOS. Under certain conditions, a malicious peer could establish an LDP session potentially leading to a Denial of Service attack on route updates and an Out of Memory condition, disrupting traffic forwarding. The issue was identified internally by Arista Networks and there is no evidence of exploitation as of the advisory date.
Solution(s)
- upgrade-solution-CVE-2019-14810
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center