Under infinite recursion in the routing layer, request-handling can cause OOM error.
Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6 Spring Cloud Function 4.3.x: versions prior to 4.3.3 Spring Cloud Function 5.0.x: versions prior to 5.0.2 Older, unsupported versions are also affected.
Weakness
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Spring_cloud_function | Vmware | 3.2.0 (including) | 3.2.16 (excluding) |
| Spring_cloud_function | Vmware | 4.1.0 (including) | 4.1.10 (excluding) |
| Spring_cloud_function | Vmware | 4.2.0 (including) | 4.2.6 (excluding) |
| Spring_cloud_function | Vmware | 4.3.0 (including) | 4.3.3 (excluding) |
| Spring_cloud_function | Vmware | 5.0.0 (including) | 5.0.2 (excluding) |