Description

An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.

Remediation

References

https://docs.google.com/presentation/d/1woXwR3vciv7ltFan6LyK5vsWXmaUi8ArZonhk80Gr5U/edit?usp=sharing

Related Vulnerabilities

CVE-2023-41037 Vulnerability in maven package org.webjars.npm:github-com-openpgpjs-openpgpjs

CVE-2021-44145 Vulnerability in maven package org.apache.nifi:nifi

CVE-2020-6459 Vulnerability in maven package org.webjars.npm:electron

CVE-2019-10407 Vulnerability in maven package hudson.plugins:project-inheritance

CVE-2019-11269 Vulnerability in maven package org.springframework.security.oauth:spring-security-oauth2

Severity

Medium

Classification

CWE-362 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Vendor Advisory