GitHub Advisoryadvisory · Maven

GHSA-mf27-wg66-m8f5 A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.

MEDIUM Published 2021-12-17 Modified 2022-01-04 Official page ↗
Aliases
CVE-2020-35210
Ecosystem
Maven
Packages
io.atomix:atomix
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2021-12-17

Affected packages

• Maven io.atomix:atomix: <= 3.1.5 (no fix yet)

Description

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.

Related

Alias · CVE (1)

  • CVE-2020-35210 A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References