Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-34061

CVE-2023-34061 – Gorouter route pruning

Description

Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to force route pruning and therefore degrade the service availability of the Cloud Foundry deployment.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry Routing Release

Default version status: unaffected

  • 0.163.0 to < 0.284.0affected

Cloud Foundry CF deployment

Default version status: unaffected

  • 0.28.0 to < 33.6.0affected

References