CVE-2023-34061

published 2024-01-12

CVE-2023-34061: Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to…

Priority P3 40 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to force route pruning and therefore degrade the service availability of the Cloud Foundry deployment.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
cloud_foundry	cf_deployment	>= 0.28.0 < 33.6.0	33.6.0
cloud_foundry	routing_release	>= 0.163.0 < 0.284.0	0.284.0
pivotal	cloud_foundry_deployment	0.28.0 – 33.5.0	—
pivotal	cloud_foundry_routing_release	0.163.0 – 0.283.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-400