An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-35213 · ADVISORY
• docs.google.com/presentation/d/1i8tVVGE8z9Rtl9UTwktOJpkZwT4kBVLgIk307qMiw_8/edit · WEB
• atomix/atomix · PACKAGE

More vulnerabilities in io.atomix:atomix

• CVE-2020-35216MEDIUM 5.9An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.
• CVE-2020-35215MEDIUM 6.5An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primiti…
• CVE-2020-35214HIGH 8.1An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.
• CVE-2020-35211HIGH 7.5An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable term…
• CVE-2020-35210MEDIUM 6.5A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessi…