{"id":"CVE-2024-22279","summary":"GoRouter Denial of Service Attack","details":"Improper handling of requests in Routing Release \u003e v0.273.0 and \u003c= v0.297.0 allows an unauthenticated attacker to degrade\n the service availability of the Cloud Foundry deployment if performed at scale.","modified":"2026-08-12T03:51:32.537055012Z","published":"2024-06-10T19:47:43.939Z","database_specific":{"cwe_ids":["CWE-444"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22279.json","unresolved_ranges":[{"extracted_events":[{"introduced":"v0.273.0"},{"last_affected":"v0.297.0"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"vmware"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22279.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22279"},{"type":"ARTICLE","url":"https://www.cloudfoundry.org/blog/cve-2024-22279-gorouter-denial-of-service-attack/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry/cf-deployment","events":[{"introduced":"fc3bed886ac759e0f4c114b91736708178223fc2"},{"last_affected":"e4caeeffdbc19d9db0e4eb10a5e109acf1017fe5"}],"database_specific":{"cpe":"cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"30.9.0"},{"last_affected":"40.13.0"}],"source":"CPE_RANGE"}}],"versions":["v40.13.0","v40.12.0","v40.11.0","v40.10.0","v40.9.0","v40.8.0","v40.7.0","v40.6.0","v40.5.0","v40.4.0","v40.3.0","v40.2.0","v40.1.0","v40.0.0","v39.8.0","v39.7.0","v39.6.0","v39.5.0","v39.4.0","v39.3.0","v39.2.0","v39.1.0","v39.0.0","v38.1.0","v38.0.0","v37.5.0","v37.4.0","v37.3.0","v37.2.0","v37.1.0","v35.5.0","v37.0.0","v36.0.0","v35.4.0","v35.3.0","v35.2.0","v35.1.0","v35.0.0","v34.2.0","v34.1.0","v34.0.0","v33.12.0","v33.11.0","v33.10.0","v33.9.0","v33.8.0","v33.7.0","v33.6.0","v33.5.0","v33.4.0","v33.3.0","v33.2.0","v33.1.0","v33.0.0","v32.17.0","v32.16.0","v32.15.0","v32.14.0","v32.13.0","v32.12.0","v32.11.0","v32.10.0","v32.9.0","v32.8.0","v32.7.0","v32.6.0","v32.5.0","v32.4.0","v32.3.0","v32.2.0","v32.1.0","v32.0.0","v31.6.0","v31.5.0","v31.4.0","v31.3.0","v31.2.0","v31.1.0","v31.0.0","v30.10.0","v30.9.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22279.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/cloudfoundry/routing-release","events":[{"introduced":"6b21c1aa78e87c4091ff4df65ee02296ef6dff86"},{"last_affected":"4d2bf62f48968ca57dab72d030cf7dfe82c65463"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:cloudfoundry:routing_release:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0.273.0"},{"last_affected":"0.297.0"}]}}],"versions":["v0.297.0","v0.295.0","v0.294.0","v0.292.0","v0.291.0","v0.290.0","v0.289.0","v0.288.0","v0.287.0","v0.286.0","v0.285.0","v0.283.0","v0.282.0","v0.280.0","v0.279.0","v0.278.0","v0.277.0","v0.276.0","v0.275.0","v0.273.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-22279.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}