CVE-2020-5420: Improper Check for Unusual or Exceptional Conditions

Cloud Foundry Routing Gorouter versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters...

PT-2020-18472

Name of the Vulnerable Software and Affected Versions Cloud Foundry Routing Gorouter versions prior to 0.206.0 Description The issue allows a malicious developer with "cf push" access to cause denial-of-service to the Cloud Foundry cluster. This can be achieved by pushing an app that returns...

PT-2020-18468

Name of the Vulnerable Software and Affected Versions Cloud Foundry Routing Gorouter versions prior to 0.204.0 Description The issue allows an unauthenticated malicious attacker to send specially-crafted HTTP requests, potentially causing the Gorouters to be dropped from the NGINX backend pool,...

CVE-2020-5416: Improper Resource Shutdown or Release

Cloud Foundry Routing Gorouter, versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can send specially-crafted HTTP requests that may cause...