What is CVE-2023-20882?

CVE-2023-20882 is a medium-severity vulnerability in Cloudfoundry Cf-deployment, classified under Uncontrolled Resource Consumption. CVSS score: 5.9/10. Published 2023-05-26.

How severe is CVE-2023-20882?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Resource exhaustion in Cloudfoundry Cf-deployment

CVE-2023-20882

In Cloud foundry routing release versions from 0.262.0 and prior to 0.266.0,a bug in the gorouter process can lead to a denial of service of applications hosted on Cloud Foundry. Under the right circumstances, when client connections are c…

Vulnerability class: DoS (Denial of Service)

EPSS: 0.006 (44.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Cloudfoundry Cf-deployment
Cloudfoundry Routing_release
N/a Cloud Foundry Routing Release — versions Routing release versions from 0.262.0 and prior to 0.266.0

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

security@vmware.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-20882?: CVE-2023-20882 is a medium-severity vulnerability in Cloudfoundry Cf-deployment, classified under Uncontrolled Resource Consumption. CVSS score: 5.9/10. Published 2023-05-26.
How severe is CVE-2023-20882?: Medium severity. CVSS v3 base score is 5.9 out of 10.