How severe is CVE-2024-6437?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.8 out of 10.

What type of vulnerability is CVE-2024-6437?

This is classified as NVD-CWE-Other, which is a common weakness in software security.

CVE-2024-6437 - MEDIUM Severity | CVSS 5.8

Vulnerability Description

On affected platforms running Arista EOS with one of the following features configured to redirect IP traffic to a next hop: policy-based routing (PBR), BGP Flowspec, or interface traffic policy -- certain IP traffic such as IPv4 packets with IP options may bypass the feature's set nexthop action and be slow-path forwarded (FIB routed) by the kernel as the packets are trapped to the CPU instead of following the redirect action's destination.

Related Vulnerabilities

CVE-2016-3467

MEDIUM

CVSS:5.8(Medium)

Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect availability via unknown vectors.

NVD-CWE-Other2016

CVE-2016-3529

MEDIUM

CVSS:5.8(Medium)

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via vectors related to SDK, a differ...

NVD-CWE-Other2016

CVE-2016-3608

MEDIUM

CVSS:5.8(Medium)

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.

NVD-CWE-Other2016

CVE-2016-4788

MEDIUM

CVSS:5.8(Medium)

Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system file via unknown vectors.

NVD-CWE-Other2016

CVE-2016-5477

MEDIUM

CVSS:5.8(Medium)

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.

NVD-CWE-Other2016

CVE-2017-0191

MEDIUM

CVSS:5.8(Medium)

A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 handles object...

NVD-CWE-Other2017