{"schemaVersion":3,"id":"CVE-2024-6437","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may bypass the feature's set nexthop action and be slow-path forwarded (FIB routed) by the kernel as the packets are trapped to the CPU instead of following the redirect action's destination.","dates":{"published":"2025-01-10T20:06:36.034Z","modified":"2025-01-10T21:12:37.972Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.8,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00527,"percentile":0.43498,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.02100000000000001,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00506},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00527,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00527,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00527,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00527,"percentile":0.43498}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00506,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00527,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00527,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00527,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00527,"percentile":0.43498}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"arista networks","product":"eos - bgp flowspec","name":"EOS - BGP Flowspec","label":"eos - bgp flowspec","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.32.0F, ≤ 4.32.1F","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.31.0M, ≤ 4.31.4M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.30.0M, ≤ 4.30.7M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.29.0M, ≤ 4.29.9M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.28.0M, ≤ 4.28.11M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.27.0M, ≤ 4.27.12M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.26.0M, ≤ 4.26.14M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.25.0M, ≤ 4.25.11M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.24.0M, ≤ 4.24.11M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.23.0M, ≤ 4.23.15M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.22.0M, ≤ 4.22.13M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.21.3F, ≤ 4.21.15M","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.32.0F, ≤ 4.32.1F | ≥ 4.31.0M, ≤ 4.31.4M | ≥ 4.30.0M, ≤ 4.30.7M | ≥ 4.29.0M, ≤ 4.29.9M | ≥ 4.28.0M, ≤ 4.28.11M | ≥ 4.27.0M, ≤ 4.27.12M | ≥ 4.26.0M, ≤ 4.26.14M | ≥ 4.25.0M, ≤ 4.25.11M | ≥ 4.24.0M, ≤ 4.24.11M | ≥ 4.23.0M, ≤ 4.23.15M | ≥ 4.22.0M, ≤ 4.22.13M | ≥ 4.21.3F, ≤ 4.21.15M","eol":null,"hubHref":"/vendor/arista_networks/eos_-_bgp_flowspec"},{"vendor":"arista networks","product":"eos - interface traffic policy","name":"EOS - Interface Traffic Policy","label":"eos - interface traffic policy","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.32.0F, ≤ 4.32.1F","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.31.0M, ≤ 4.31.4M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.30.0M, ≤ 4.30.7M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.29.0M, ≤ 4.29.9M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.28.0M, ≤ 4.28.11M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.27.2F, ≤ 4.27.12F","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.32.0F, ≤ 4.32.1F | ≥ 4.31.0M, ≤ 4.31.4M | ≥ 4.30.0M, ≤ 4.30.7M | ≥ 4.29.0M, ≤ 4.29.9M | ≥ 4.28.0M, ≤ 4.28.11M | ≥ 4.27.2F, ≤ 4.27.12F","eol":null,"hubHref":"/vendor/arista_networks/eos_-_interface_traffic_policy"},{"vendor":"arista networks","product":"eos-policy based routing (pbr)","name":"EOS-Policy Based Routing (PBR)","label":"eos-policy based routing (pbr)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.32.0F, ≤ 4.32.1F","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.31.0M, ≤ 4.31.4M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.30.0M, ≤ 4.30.7M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.29.0M, ≤ 4.29.9M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.28.0M, ≤ 4.28.11M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.27.0M, ≤ 4.27.12M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.26.0M, ≤ 4.26.14M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.25.0M, ≤ 4.25.11M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.24.0M, ≤ 4.24.11M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.23.0M, ≤ 4.23.15M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.22.0M, ≤ 4.22.13M","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.21.0M, ≤ 4.21.15M","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.32.0F, ≤ 4.32.1F | ≥ 4.31.0M, ≤ 4.31.4M | ≥ 4.30.0M, ≤ 4.30.7M | ≥ 4.29.0M, ≤ 4.29.9M | ≥ 4.28.0M, ≤ 4.28.11M | ≥ 4.27.0M, ≤ 4.27.12M | ≥ 4.26.0M, ≤ 4.26.14M | ≥ 4.25.0M, ≤ 4.25.11M | ≥ 4.24.0M, ≤ 4.24.11M | ≥ 4.23.0M, ≤ 4.23.15M | ≥ 4.22.0M, ≤ 4.22.13M | ≥ 4.21.0M, ≤ 4.21.15M","eol":null,"hubHref":"/vendor/arista_networks/eos-policy_based_routing_pbr"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/20689-security-advisory-0108","label":"www.arista.com/en/support/advisories-notices/security-advisory/20689-security-advisory-0108","hostname":"www.arista.com","tags":[]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2025-01-10T20:06:36.034Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-01-10T21:12:37.972Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":23,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T02:15:25.315Z","stale":false,"partial":false}}