CVE-2020-35210

Vulnerability

Atomix v3.1.5 contains a vulnerability in its Raft protocol implementation that allows an attacker to cause a denial of service by sending a flood of OpenSessionRequest messages [1]. The vulnerability is triggered when the attacker can reach the Atomix cluster over the network.

Exploitation

An attacker with network access to the Atomix cluster can send a large number of Raft OpenSessionRequest messages, overwhelming the system and leading to a denial of service [1]. No authentication or prior access is required if the cluster is exposed to the attacker.

Impact

Successful exploitation results in a denial of service, affecting the availability of services relying on the Atomix cluster. No confidentiality or integrity impact is reported.

Mitigation

As of publication, no patch or workaround has been disclosed in the available references [1]. Users should monitor the Atomix project for updates and consider network-level restrictions to limit exposure.