atomix/atomix Security Advisories | GitStock

medium2021-12-17

CVE-2020-35215-Malicious Atomix node queries expose sensitive information

GHSA-g7p8-r2ch-4rmf

high2021-12-17

CVE-2020-35209-An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.

GHSA-7fr2-94h7-ccg2

high2021-12-17

CVE-2020-35214-An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.

GHSA-m4h3-7mc2-v295

medium2021-12-17

CVE-2020-35210-A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.

GHSA-mf27-wg66-m8f5

medium2021-12-17

CVE-2020-35216-An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.

GHSA-6vvh-5794-vpmj

high2021-12-17

CVE-2020-35213-An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.

GHSA-2fqw-684c-pvp7

high2021-12-17

CVE-2020-35211-An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.

GHSA-4jhc-wjr3-pwh2