CVE-2020-35210 is a denial-of-service vulnerability affecting Atomix v3.1.5, allowing attackers to flood Raft sessions with OpenSessionRequest messages. Rated Medium severity (CVSS 6.5), it can be exploited remotely with low complexity and privileges, leading to high availability impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.1.5CPE matchmatch criteria | cpe:2.3:a:atomix:atomix:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.
Dec 17, 2021atomix: Atomix 3.1.5 allows attackers to cause a denial of service (DoS)
Dec 16, 2021