CVE-2024-38826 — CVE-2024-38826 Cloud Controller Denial of Service Attack

CVE-2024-38826

CVE-2024-38826 Cloud Controller Denial of Service Attack PUBLISHED

Description (CNA)

Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack against Cloud Controller. The Cloud Foundry project recommends upgrading the following releases: * Upgrade capi release version to 1.194.0 or greater * Upgrade cf-deployment version to v44.1.0 or greater. This includes a patched capi release

Affected (CNA)

Vendor / product	Versions
Cloud Foundry / Cloud Foundry	affected 0 before 1.194

CWE

No CWE identifiers supplied.

References

https://www.cloudfoundry.org/blog/cve-2024-38826-cloud-controller-denial-of-service-attack/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.