Skip to content
OpenAdvisories
High · 7.5 CVE-2023-34061 EUVD-2023-38175GHSA-xr94-cv8c-7r6v

CVE-2023-34061 – Gorouter route pruning

Published Jan 12, 2024 · Updated Jun 3, 2025 · Assigned by vmware

Description

Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to force route pruning and therefore degrade the service availability of the Cloud Foundry deployment.

Affected products

VendorProductAffectedFixed
Cloud Foundry Routing Release 0.163.0 – < 0.284.0 0.284.0
Cloud Foundry CF deployment 0.28.0 – < 33.6.0 33.6.0

References