VULNERABILITY INTELLIGENCE

CVE-2023-20882

CVSS score5.9 MEDIUM
EPSS probability0.58%
CISA KEVNot currently listed
Published2023-05-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

In Cloud foundry routing release versions from 0.262.0 and prior to 0.266.0,a bug in the gorouter process can lead to a denial of service of applications hosted on Cloud Foundry. Under the right circumstances, when client connections are closed prematurely, gorouter marks the currently selected backend as failed and removes it from the routing pool.

Weakness classification

  • security@vmware.com: CWE-400
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references