In Cloud foundry routing release versions from 0.262.0 and prior to 0.266.0,a bug in the gorouter process can lead to a denial of service of applications hosted on Cloud Foundry. Under the right circumstances, when client connections are closed prematurely, gorouter marks the currently selected backend as failed and removes it from the routing pool.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HCloudfoundry Cf Deployment
APPCloudfoundry27.4.0 – 29.0.0 (bez)Cloudfoundry Routing Release
APPCloudfoundry0.262.0 – 0.266.0 (bez)
Related vulnerabilities
Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, ap...
Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure proto...
Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may ove...
Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerabil...
In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in re...