Denial Of Service (DoS)

atomix-raft is vulnerable to denial of service. An attacker can cause raft session flooding attack via sending large number of messages to 'OpenSessionRequest' by using a malicious Atomix node to crash the application...

Information Disclosure

atomix is vulnerable to information disclosure. An attacker can access sensitive information when a malicious Atomix node queries distributed variable primitives containing the primitive lists that ONOS nodes use to share important states...

Denial Of Service (DoS)

atomix-cluster is vulnerable to denial of service. An attacker can cause an application crash through a malicious Atomix node by sending a fake member down event...

Atomix has unspecified vulnerabilities

Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. An unspecified vulnerability exists in Atomix version 3.1.5. The vulnerability allows malicious Atomix nodes to remove state from ONOS storage by abusing raw operations. No details of the vulnerability are currently...

Atomix Information Disclosure Vulnerability

Atomix is a fault-tolerant distributed coordination framework for JAVA 8. Atomix version 3.1.5 is vulnerable to an information disclosure vulnerability. An attacker could exploit this vulnerability to access sensitive information when a malicious Atomix node queries the distributed variable...

Atomix Denial of Service Vulnerability

Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. A denial-of-service vulnerability exists in Atomix version 3.1.5. An attacker could exploit this vulnerability to cause a denial of service via a false link event message sent to the primary ONOS node...

Atomix has an unspecified vulnerability (CNVD-2021-101702)

Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. An unspecified vulnerability exists in Atomix version 3.1.5. The vulnerability allows an unauthorized Atomix node to join the target cluster by providing configuration information. No detailed vulnerability details are...

Atomix Denial of Service Vulnerability (CNVD-2021-101704)

Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. A denial-of-service vulnerability exists in Atomix version 3.1.5. An attacker could exploit this vulnerability to cause a denial of service via a false member shutdown event message...

com.github.lburgazzoli:atomix-boot (>=1.0.1 <=1.0.2), com.github.lburgazzoli:atomix-boot-examples (>=1.0.1 <=1.0.2) +123 more potentially affected by CVE-2020-35215 via io.atomix:atomix (>=0.1.0-beta1 <=3.1.5)

io.atomix:atomix MAVEN version =0.1.0-beta1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =3.0.0, =1.2.3-1, =0.0.2, =0.0.2, =0.0.21, =0.0.31, =0.2.12, =0.3.5 and more Source cves: CVE-2020-35215 Source advisory: OSV:GHSA-G7P8-R2CH-4RMF...

GHSA-G7P8-R2CH-4RMF Malicious Atomix node queries expose sensitive information

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

Malicious Atomix node queries expose sensitive information

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

com.github.lburgazzoli:atomix-boot (>=1.0.1 <=1.0.2), com.github.lburgazzoli:atomix-boot-examples (>=1.0.1 <=1.0.2) +123 more potentially affected by CVE-2020-35209 via io.atomix:atomix (>=0.1.0-beta1 <=3.1.5)

io.atomix:atomix MAVEN version =0.1.0-beta1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =3.0.0, =1.2.3-1, =0.0.2, =0.0.2, =0.0.21, =0.0.31, =0.2.12, =0.3.5 and more Source cves: CVE-2020-35209 Source advisory: OSV:GHSA-7FR2-94H7-CCG2...

GHSA-7FR2-94H7-CCG2 An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...

com.github.lburgazzoli:atomix-boot (>=1.0.1 <=1.0.2), com.github.lburgazzoli:atomix-boot-examples (>=1.0.1 <=1.0.2) +123 more potentially affected by CVE-2020-35214 via io.atomix:atomix (>=0.1.0-beta1 <=3.1.5)

io.atomix:atomix MAVEN version =0.1.0-beta1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =3.0.0, =1.2.3-1, =0.0.2, =0.0.2, =0.0.21, =0.0.31, =0.2.12, =0.3.5 and more Source cves: CVE-2020-35214 Source advisory: OSV:GHSA-M4H3-7MC2-V295...

GHSA-M4H3-7MC2-V295 An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.

An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations...

An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.

An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations...

com.github.lburgazzoli:atomix-boot (>=1.0.1 <=1.0.2), com.github.lburgazzoli:atomix-boot-examples (>=1.0.1 <=1.0.2) +123 more potentially affected by CVE-2020-35210 via io.atomix:atomix (>=0.1.0-beta1 <=3.1.5)

io.atomix:atomix MAVEN version =0.1.0-beta1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =3.0.0, =1.2.3-1, =0.0.2, =0.0.2, =0.0.21, =0.0.31, =0.2.12, =0.3.5 and more Source cves: CVE-2020-35210 Source advisory: OSV:GHSA-MF27-WG66-M8F5...

GHSA-MF27-WG66-M8F5 A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...