Description

An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.

Remediation

References

https://docs.google.com/presentation/d/1i8tVVGE8z9Rtl9UTwktOJpkZwT4kBVLgIk307qMiw_8/edit?usp=sharing

Related Vulnerabilities

CVE-2019-1010266 Vulnerability in maven package org.webjars:lodash

CVE-2021-32853 Vulnerability in npm package erxes

CVE-2019-12041 Vulnerability in maven package org.webjars:remarkable

CVE-2022-0198 Vulnerability in maven package edu.stanford.nlp:stanford-corenlp

CVE-2022-38545 Vulnerability in npm package valine

Severity

Critical

Classification

CWE-74 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Tags

Exploit Third Party Advisory