Vulnerabilities > Atomix
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-12-16 | CVE-2020-35209 | Unspecified vulnerability in Atomix An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information. | 7.5 |
| 2021-12-16 | CVE-2020-35210 | Allocation of Resources Without Limits or Throttling vulnerability in Atomix A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages. | 6.5 |
| 2021-12-16 | CVE-2020-35211 | Unspecified vulnerability in Atomix 3.1.5 An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext. | 7.5 |
| 2021-12-16 | CVE-2020-35213 | Injection vulnerability in Atomix 3.1.5 An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node. | 8.1 |
| 2021-12-16 | CVE-2020-35214 | Unspecified vulnerability in Atomix 3.1.5 An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations. | 8.1 |
| 2021-12-16 | CVE-2020-35215 | Exposure of Resource to Wrong Sphere vulnerability in Atomix 3.1.5 An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states. | 6.5 |
| 2021-12-16 | CVE-2020-35216 | Race Condition vulnerability in Atomix 3.1.5 An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages. | 5.9 |