AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Arista NetworksCVE-2026-73462

Arista Networks EOS: out-of-bounds read

Arista Networks

CVE-2026-73462 · Published Sep 16, 2026 · updated Sep 17, 2026

High7.1
No fix yet
Arista Networks advisory

On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly. This results in a temporary disruption of multicast traffic management, which may cause multicast traffic to be flooded to all ports of the affected VLAN until the service recovers. Repeated exploitation could result in a prolonged loss of intended multicast forwarding behavior.

Affected versions

PackageAffectedFixed in
EOS
Product
>= 4.36.0, <= 4.36.1FNo fix yet
>= 4.35.0, <= 4.35.5MNo fix yet
>= 4.34.0, <= 4.34.7.1MNo fix yet
>= 4.33.0, <= 4.33.8MNo fix yet
Details and references
CVSS 4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-125

More Arista Networks advisories

All Arista Networks