PatchTheCVEatomix vulnerabilities and fixes
Recent CVEs affecting atomix, with upgrade or downgrade steps. 7 tracked.
atomix has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-12-16. Highest priority: CVE-2020-35211 (score 52/100).
- CVE-2020-35216 MEDIUM 5.9 DOWNGRADE An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event mess
- CVE-2020-35215 MEDIUM 6.5 DOWNGRADE An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node querie
- CVE-2020-35214 HIGH 8.1 DOWNGRADE An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primiti
- CVE-2020-35213 HIGH 8.1 DOWNGRADE An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages se
- CVE-2020-35211 HIGH 7.5 DOWNGRADE An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via man
- CVE-2020-35210 MEDIUM 6.5 UPGRADE A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session floodi
- CVE-2020-35209 HIGH 7.5 UPGRADE An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuratio
FAQ
How do I fix atomix vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is atomix being exploited right now?
None of the tracked atomix CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which atomix CVE should I patch first?
CVE-2020-35211 currently ranks highest (52/100): An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via man.