Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2020-5416

CF clusters with NGINX in front of them may be vulnerable to DoS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
pivotal

Description

Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can send specially-crafted HTTP requests that may cause the Gorouters to be dropped from the NGINX backend pool.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry Routing

  • All to < 0.204.0affected

Cloud Foundry CF Deployment

  • All to < 13.13.0affected

References