by Kastro Description · from the CVE record
On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device. This crafted PDU could cause the kernel on the initiator device to crash, resulting in an unexpected device reboot.
Affected
ProductAffectedFixed inSource
EOS4.36.0F – 4.36.2F–CNA
EOS4.35.0F – 4.35.6M–CNA
EOS4.34.0F – 4.34.8M–CNA
EOS4.33.0F – 4.33.10M–CNA
EOS4.32.0F – < 4.33.0F4.33.0FCNA
EOS1.0.0 – < 4.32.0F4.32.0FCNA
Scores by source
Arista (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
Arista (CNA)8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H