CF clusters with NGINX in front of them may be vulnerable to DoS

Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can send specially-crafted HTTP requests that may cause the Gorouters to be dropped from the NGINX backend pool.

N/A

不恰当的资源关闭或释放

Cloud Foundry Routing 安全漏洞

Cloud Foundry是美国Cloud Foundry基金会的一套开源的平台即服务（PaaS）云计算平台。该产品提供容器调度、持续交付和自动化服务部署等功能。 Cloud Foundry Routing 0.204.0之前版本存在漏洞，攻击者在未经身份验证的恶意攻击者通过发送精心编制的HTTP请求导致gorouter从NGINX后端池中删除。

N/A

N/A