Description

An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.

Remediation

References

https://docs.google.com/presentation/d/1woXwR3vciv7ltFan6LyK5vsWXmaUi8ArZonhk80Gr5U/edit?usp=sharing

Related Vulnerabilities

CVE-2022-34193 Vulnerability in maven package org.lilicurroad.jenkins:packageversion

CVE-2023-40347 Vulnerability in maven package org.jenkins-ci.plugins:maven-artifact-choicelistprovider

CVE-2022-23107 Vulnerability in maven package io.jenkins.plugins:warnings-ng

CVE-2011-0534 Vulnerability in maven package org.apache.tomcat:tomcat-coyote

CVE-2020-2299 Vulnerability in maven package org.jenkins-ci.plugins:active-directory

Severity

Medium

Classification

CWE-362 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Vendor Advisory