Description
Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown while constructing certain http requests. A remote authenticated user may construct malicious requests to cause the traffic controller to leave dangling TCP connections, which could cause denial of service.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cloud Foundry | Loggregator | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2018-11894 | Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown while constructing certain http requests. A remote authenticated user may construct malicious requests to cause the traffic controller to leave dangling TCP connections, which could cause denial of service. |
References
| Link | Providers |
|---|---|
| https://www.cloudfoundry.org/blog/cve-2018-1269 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: dell
Published:
Updated: 2024-09-17T04:05:15.217Z
Reserved: 2017-12-06T00:00:00.000Z
Link: CVE-2018-1269
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-06-06T20:29:00.550
Modified: 2024-11-21T03:59:30.360
Link: CVE-2018-1269
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses