Code injection

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

Code injection

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false link event messages sent to a master ONOS node...

CVE-2020-35216

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

CVE-2020-35215

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

CVE-2020-35215

CVE-2020-35215 affects Atomix v3.1.5. A malicious Atomix node querying distributed variable primitives can access the full lists of primitives that ONOS nodes use to share important state, causing information disclosure. The connected Red Hat, CNVD, CVE/CVE ecosystem entries corroborate an inform...

CVE-2020-35216

Atomix v3.1.5 is affected by a DoS vulnerability caused by processing false member down/shutdown event messages. Multiple sources (NVD/CNVD/Red Hat/Veracode/CNVD) describe that an attacker can trigger a denial of service, potentially crashing the application, by sending crafted false member-down ...

CVE-2020-35214

Atomix v3.1.5 contains a vulnerability that allows a malicious Atomix node to remove states from ONOS storage by abusing primitive operations. Root cause described across multiple sources is abuse of primitive operations within Atomix, enabling unauthorized state deletions. CVSS data shows networ...

CVE-2020-35214

An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations...

CVE-2020-35213

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false link event messages sent to a master ONOS node...

CVE-2020-35213

CVE-2020-35213 affects Atomix v3.1.5 and enables a denial of service by sending false link event messages to the master ONOS node. The description across connected sources consistently cites a DoS impact with high severity (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is descri...

CVE-2020-35211

CVE-2020-35211 describes a vulnerability in Atomix v3.1.5 where unauthorized Atomix nodes can become the lead node in a target cluster by manipulating variables in RaftContext. The issue affects the Raft leadership mechanism and can impact cluster leadership integrity. Exploit details, affected p...

CVE-2020-35211

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext...

CVE-2020-35210

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...

CVE-2020-35210

CVE-2020-35210 affects Atomix v3.1.5 and enables denial-of-service via a Raft session flooding attack using Raft OpenSessionRequest messages. Multiple connected sources (Red Hat CVE entry, CNVD/CNNVD, Veracode, GHSA) corroborate a DoS impact stemming from a resource-management flaw in Atomix 3.1....

CVE-2020-35209

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information...

CVE-2020-35209

Atomix v3.1.5 is identified as affected. The CVE-2020-35209 entry documents that unauthorized Atomix nodes can join a target cluster by providing configuration information. Connected sources cite a high-severity impact (integrity, network-exploitable) with CVSSv3.1 base score 7.5 and CVSSv2 base ...

Atomix 竞争条件问题漏洞

Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. A denial-of-service vulnerability exists in Atomix version 3.1.5. An attacker could exploit this vulnerability to cause a denial of service via a false member shutdown event message...

CVE-2020-35216: Concurrent Execution using Shared Resource with Improper Synchronization

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

CVE-2020-35211: Undefined Security Weakness

An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext...

CVE-2020-35210: Allocation of Resources Without Limits or Throttling

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service DoS via a Raft session flooding attack using Raft OpenSessionRequest messages...