Description

An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.

Remediation

References

https://docs.google.com/presentation/d/1i8tVVGE8z9Rtl9UTwktOJpkZwT4kBVLgIk307qMiw_8/edit?usp=sharing

Related Vulnerabilities

CVE-2020-7961 Vulnerability in maven package com.liferay.portal:portal-impl

CVE-2020-8910 Vulnerability in npm package google-closure-library

CVE-2022-25927 Vulnerability in npm package ua-parser-js

CVE-2020-7757 Vulnerability in npm package droppy

CVE-2020-7630 Vulnerability in npm package git-add-remote

Severity

Critical

Classification

CWE-74 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Tags

Exploit Third Party Advisory