CVE-2018-1269
MEDIUMCloud Foundry Loggregator DoS via Malicious HTTP Request
Title source: llmDescription
Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown while constructing certain http requests. A remote authenticated user may construct malicious requests to cause the traffic controller to leave dangling TCP connections, which could cause denial of service.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_confirm
https://www.cloudfoundry.org/blog/cve-2018-1269
Scores
CVSS v3
6.5
EPSS
0.0106
EPSS Percentile
60.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-755
Status
published
Products (1)
cloudfoundry/loggregator
89 - 89.5
Published
Jun 06, 2018
Tracked Since
Feb 18, 2026