Description

An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.

Remediation

References

https://docs.google.com/presentation/d/1woXwR3vciv7ltFan6LyK5vsWXmaUi8ArZonhk80Gr5U/edit?usp=sharing

Related Vulnerabilities

CVE-2015-5254 Vulnerability in maven package org.apache.activemq:activemq-all

CVE-2020-2153 Vulnerability in maven package org.jenkins-ci.plugins:backlog

CVE-2020-11023 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery

CVE-2020-14446 Vulnerability in maven package org.wso2.carbon.identity.framework:org.wso2.carbon.policyeditor.ui

CVE-2014-7810 Vulnerability in maven package org.mortbay.jasper:apache-el

Severity

Medium

Classification

CWE-362 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Vendor Advisory