Bug 2056585 (CVE-2020-35213) - CVE-2020-35213 atomix: Atomix 3.1.5 ONOS Node denial of service
Summary: CVE-2020-35213 atomix: Atomix 3.1.5 ONOS Node denial of service
Keywords:
Status: NEW
Alias: CVE-2020-35213
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2056586
Blocks: 2034713
TreeView+ depends on / blocked
 
Reported: 2022-02-21 14:28 UTC by Avinash Hanwate
Modified: 2024-05-03 18:49 UTC (History)
25 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description Avinash Hanwate 2022-02-21 14:28:04 UTC
An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.

https://docs.google.com/presentation/d/1i8tVVGE8z9Rtl9UTwktOJpkZwT4kBVLgIk307qMiw_8/edit?usp=sharing

Comment 1 Avinash Hanwate 2022-02-21 14:28:32 UTC
Created atomix tracking bugs for this issue:

Affects: fedora-all [bug 2056586]

Comment 5 Hans de Goede 2022-02-23 09:16:43 UTC
(In reply to Avinash Hanwate from comment #1)
> Created atomix tracking bugs for this issue:
> 
> Affects: fedora-all [bug xxxxxxxx]

As I already mentioned in bug 2056593, the Fedora atomix package has nothing to do what soever with the Atomix software these CVEs are for:

"""
From: https://src.fedoraproject.org/rpms/atomix

"Atomix is yet another little mind game. You have to build molecules out of single atoms laying around. Of course there is a time limit and the handling is not as easy as you might expect ;-). This game is inspired by the original Amiga game Atomix and uses the GNOME libraries."

IOW this is not the Atomix you are looking for, closing.
"""

I had 24! bugzilla emails about this because no-one checked this was actually the right atomix. Please stop creating Fedora bugs for this and stop adding the Fedora atomix maintainers to the Cc of the overall tracking bugs for these!


Note You need to log in before you can comment on or make changes to this bug.