Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Arista EOS with BGP Link State configured: BGP peer flapping causes memory leak

CVE-2024-9135 · published 1 year ago
Summary

A bug in Arista EOS's BGP Link State feature can cause the BGP agent to slowly run out of memory when BGP peers are rapidly coming and going. This can lead to the BGP routing system shutting down and causing network instability. To fix this, Arista recommends disabling BGP Link State or upgrading to a newer version of EOS.

Original advisory text
On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route f...
On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak memory. This may result in BGP routing processing being terminated and route flapping.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-401Memory Leak
Timeline
Published4 Mar 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-9135 · NVD
Track software like this
Free during beta