CVE-2019-14810

MEDIUM

5.9

CVSS Score

Published: October 10, 2019 at 06:07 PM UTC

Updated: June 17, 2026 at 02:19 AM UTC

10 products affected across 1 vendorExtensible Operating System7280R37500R3

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.9

Exploit prediction

EPSS 0.7%

Description

A vulnerability has been found in the implementation of the Label Distribution Protocol (LDP) protocol in EOS. Under race conditions, the LDP agent can establish an LDP session with a malicious peer potentially allowing the possibility of a Denial of Service (DoS) attack on route updates and in turn potentially leading to an Out of Memory (OOM) condition that is disruptive to traffic forwarding. Affected EOS versions include: 4.22 release train: 4.22.1F and earlier releases 4.21 release train: 4.21.0F - 4.21.2.3F, 4.21.3F - 4.21.7.1M 4.20 release train: 4.20.14M and earlier releases 4.19 release train: 4.19.12M and earlier releases End of support release trains (4.18 and 4.17)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Extensible Operating System · Arista

95%

4.19 ≤ v ≤ 4.19.12m4.20 ≤ v ≤ 4.20.14m4.21.0f ≤ v ≤ 4.21.2.3f4.21.3f ≤ v ≤ 4.21.74.17 4.18 4.22.1f

arista-7020r (environment) · arista-7280e (environment) · arista-7280r (environment) · arista-7280r2 (environment) · arista-7280r3 (environment) · arista-7500e (environment) · arista-7500r (environment) · arista-7500r2 (environment) · arista-7500r3 (environment)

7020R · Aristadevice

80%

All versions

7280E · Aristadevice

80%

All versions

7280R · Aristadevice

80%

All versions

7280R2 · Aristadevice

80%

All versions