CVE-2020-26569 Other in n/a
Malformed packets in EVPN VxLAN setups cause incorrect MAC-to-IP bindings, leading to cross-VLAN traffic leakage and potential data exposure or service disruption.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-26569?
CVE-2020-26569 is a medium-severity vulnerability in n/a, published on 28 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result packets can be incorrectly forwarded across VLAN boundaries. This can result in traffic being discarded on the receiving VLAN. This affects versions: 4.21.12M and below releases in the 4.21.x train; 4.22.7M and below releases in the 4.22.x train; 4.23.5M and below releases in the 4.23.x train; 4.24.2F and below releases in the 4.24.x train.
Which versions are affected by CVE-2020-26569?
It affects 1 product.
Products include Arista Eos.
How do I fix CVE-2020-26569?
No fix has been published for CVE-2020-26569 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-26569 being exploited?
There is no known exploitation of CVE-2020-26569 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-77mv-h93c-9885.