Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2020-5420

Gorouter is vulnerable to DoS attack via invalid HTTP responses

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
pivotal

Description

Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry Routing

  • All to < 0.206.0affected

Cloud Foundry CF Deployment

  • All to < 13.15.0affected

References