CVE-2020-35216

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

CVE-2020-35216

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

Design/Logic Flaw

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

Session fixation

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...

Information disclosure

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...

Design/Logic Flaw

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext...

Code injection

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false link event messages sent to a master ONOS node...

Code injection

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

Code injection

An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations...

CVE-2020-35216

Atomix v3.1.5 is affected by a DoS vulnerability caused by processing false member down/shutdown event messages. Multiple sources (NVD/CNVD/Red Hat/Veracode/CNVD) describe that an attacker can trigger a denial of service, potentially crashing the application, by sending crafted false member-down ...

CVE-2020-35215

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

CVE-2020-35216

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

CVE-2020-35215

CVE-2020-35215 affects Atomix v3.1.5. A malicious Atomix node querying distributed variable primitives can access the full lists of primitives that ONOS nodes use to share important state, causing information disclosure. The connected Red Hat, CNVD, CVE/CVE ecosystem entries corroborate an inform...

CVE-2020-35214

An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations...

CVE-2020-35214

Atomix v3.1.5 contains a vulnerability that allows a malicious Atomix node to remove states from ONOS storage by abusing primitive operations. Root cause described across multiple sources is abuse of primitive operations within Atomix, enabling unauthorized state deletions. CVSS data shows networ...

CVE-2020-35213

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false link event messages sent to a master ONOS node...

CVE-2020-35213

CVE-2020-35213 affects Atomix v3.1.5 and enables a denial of service by sending false link event messages to the master ONOS node. The description across connected sources consistently cites a DoS impact with high severity (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is descri...

CVE-2020-35211

CVE-2020-35211 describes a vulnerability in Atomix v3.1.5 where unauthorized Atomix nodes can become the lead node in a target cluster by manipulating variables in RaftContext. The issue affects the Raft leadership mechanism and can impact cluster leadership integrity. Exploit details, affected p...

CVE-2020-35211

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext...

CVE-2020-35210

CVE-2020-35210 affects Atomix v3.1.5 and enables denial-of-service via a Raft session flooding attack using Raft OpenSessionRequest messages. Multiple connected sources (Red Hat CVE entry, CNVD/CNNVD, Veracode, GHSA) corroborate a DoS impact stemming from a resource-management flaw in Atomix 3.1....