Description

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.

Remediation

References

https://docs.google.com/presentation/d/1eZznIciFI06_5UJrXvlLugH2-nmjfYpQO5NyNMc9RxU/edit?usp=sharing

Related Vulnerabilities

CVE-2021-32824 Vulnerability in maven package org.apache.dubbo:dubbo-common

CVE-2016-1000344 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on

CVE-2020-26291 Vulnerability in maven package org.webjars.bower:urijs

CVE-2020-7742 Vulnerability in npm package simpl-schema

CVE-2020-14966 Vulnerability in npm package jsrsasign

Severity

High

Classification

CWE-770 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Third Party Advisory