CVE-2018-1269: Medium severity Cloudfoundry Loggregator vulnerability
Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown while constructing certain http requests. A remote authenticated user may construct malicious requests to cause the traffic controller to leave dangling TCP connections, which could cause denial of service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1269?
CVE-2018-1269 is a vulnerability in Cloud Foundry Loggregator versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2.
How does CVE-2018-1269 affect Cloud Foundry Loggregator?
CVE-2018-1269 allows a remote authenticated user to construct malicious requests that can cause traffic analysis and a denial of service (DoS).
What is the severity of CVE-2018-1269?
The severity of CVE-2018-1269 is medium, with a CVSS severity score of 6.5.
How can I fix CVE-2018-1269 in Cloud Foundry Loggregator?
To fix CVE-2018-1269, upgrade Cloud Foundry Loggregator to version 89.5, 96.1, 99.1, 101.9, or 102.2 or later.
Where can I find more information about CVE-2018-1269?
More information about CVE-2018-1269 can be found at the following link: [https://www.cloudfoundry.org/blog/cve-2018-1269](https://www.cloudfoundry.org/blog/cve-2018-1269)