CVE-2020-35213: Denial of Service Vulnerability in Atomix v3.1.5
Summary
CVE-2020-35213: An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node. Affects io.atomix:atomix versions < 3.1.5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Atomix is a Maven package that provides a distributed coordination framework for building fault-tolerant and scalable systems. It offers a set of high-level abstractions and primitives for distributed computing. Atomix is vulnerable to a denial of service (DoS) attack in version 3.1.5 when false link event messages are sent to a master ONOS node.
Vulnerability Detail
The vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) by sending false link event messages to a master ONOS node. This can lead to the disruption of normal system operations and potentially impact the availability of the affected system. The vulnerability has a CVSS score of 8.1, indicating a high severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is currently no known workaround for this vulnerability. It is advised to apply the recommended fix by upgrading to a non-affected version of Atomix.
Conclusion
In conclusion, Atomix v3.1.5 is vulnerable to a denial of service (DoS) attack. To mitigate this vulnerability, it is crucial to upgrade to a non-affected version of Atomix. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for io.atomix:atomix →
FAQ
Atomix is a distributed coordination framework for building fault-tolerant and scalable systems. It provides high-level abstractions and primitives for distributed computing.
The vulnerability allows attackers to cause a denial of service (DoS) by sending false link event messages to a master ONOS node. This can disrupt normal system operations and impact system availability.
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
No, there is currently no known workaround for this vulnerability. It is recommended to apply the fix by upgrading to a non-affected version of Atomix.
The latest version of Atomix can be found on the official Maven repository.
Related vulnerabilities
Recent vulnerabilities recorded for io.atomix:atomix.
