Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-38826

CVE-2024-38826 Cloud Controller Denial of Service Attack

Description

Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: * Upgrade capi release version to 1.194.0 or greater * Upgrade cf-deployment version to v44.1.0 or greater. This includes a patched capi release

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry Cloud Foundry

Default version status: affected

  • 0 to < 1.194affected

References