What is CVE-2023-20882?

CVE-2023-20882 is a vulnerability in Cloud Foundry routing release versions from 0.262.0 and prior to 0.266.0 that can lead to a denial of service of applications hosted on Cloud Foundry.

How does CVE-2023-20882 affect Cloud Foundry?

CVE-2023-20882 affects Cloud Foundry by causing a denial of service of applications hosted on the platform.

What is the severity of CVE-2023-20882?

The severity of CVE-2023-20882 is medium, with a CVSS score of 5.9.

How can I fix CVE-2023-20882?

To fix CVE-2023-20882, it is recommended to update Cloud Foundry routing release to version 0.266.0 or later.

Where can I find more information about CVE-2023-20882?

More information about CVE-2023-20882 can be found at the following link: https://www.cloudfoundry.org/blog/cve-2023-20882-gorouter-pruning-via-client-disconnect-resulting-in-dos/

Vulnerability/
CVE-2023-20882

medium

5.9

CWE

400

26/5/2023

2/8/2024

CVE-2023-20882

First published: Fri May 26 2023(Updated: )

In Cloud foundry routing release versions from 0.262.0 and prior to 0.266.0,a bug in the gorouter process can lead to a denial of service of applications hosted on Cloud Foundry. Under the right circumstances, when client connections are closed prematurely, gorouter marks the currently selected backend as failed and removes it from the routing pool.

Credit: security@vmware.com

Affected Software	Affected Version	How to fix
Cloudfoundry Routing Release	>=0.262.0<0.266.0
Cloudfoundry Cf-deployment	>=27.4.0<29.0.0

Never miss a vulnerability like this again

Reference Links

https://www.cloudfoundry.org/blog/cve-2023-20882-gorouter-pruning-via-client-disconnect-resulting-in-dos/

Frequently Asked Questions

What is CVE-2023-20882?
CVE-2023-20882 is a vulnerability in Cloud Foundry routing release versions from 0.262.0 and prior to 0.266.0 that can lead to a denial of service of applications hosted on Cloud Foundry.
How does CVE-2023-20882 affect Cloud Foundry?
CVE-2023-20882 affects Cloud Foundry by causing a denial of service of applications hosted on the platform.
What is the severity of CVE-2023-20882?
The severity of CVE-2023-20882 is medium, with a CVSS score of 5.9.
How can I fix CVE-2023-20882?
To fix CVE-2023-20882, it is recommended to update Cloud Foundry routing release to version 0.266.0 or later.
Where can I find more information about CVE-2023-20882?
More information about CVE-2023-20882 can be found at the following link: https://www.cloudfoundry.org/blog/cve-2023-20882-gorouter-pruning-via-client-disconnect-resulting-in-dos/

collector/nvd-latest
vendor/cloudfoundry
vendor/routing release
vendor/cf-deployment
collector/nvd-index
agent/weakness
agent/references
agent/severity
agent/author
agent/type
agent/description
agent/event
agent/softwarecombine
agent/last-modified-date
agent/first-publish-date
agent/tags
collector/mitre-cve
source/MITRE
canonical/cloudfoundry routing release
version/cloudfoundry routing release/0.262.0
canonical/cloudfoundry cf-deployment
version/cloudfoundry cf-deployment/27.4.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.