Medium · 6.5 CVE-2020-35210 EUVD-2021-2552GHSA-mf27-wg66-m8f5

A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.

Published Dec 16, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Package: io.atomix:atomix Ecosystem: Maven

Description

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	io.atomix:atomix	<= 3.1.5	—	GHSA-mf27-wg66-m8f5

References

https://docs.google.com/presentation/d/1eZznIciFI06_5UJrXvlLugH2-nmjfYpQO5NyNMc9RxU/edit?usp=sharing