CVE-2016-0780: High severity cloudfoundry Cf-release vulnerability
It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18 do not properly enforce disk quotas in certain cases. An attacker could use an improper disk quota value to bypass enforcement and consume all the disk on DEAs/CELLs causing a potential denial of service for other applications.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0780?
The severity of CVE-2016-0780 is considered medium due to the potential for unauthorized disk quota manipulation.
How do I fix CVE-2016-0780?
To mitigate CVE-2016-0780, upgrade to Pivotal Cloud Foundry Elastic Runtime version 1.5.17 or 1.6.18 or later.
What versions are affected by CVE-2016-0780?
CVE-2016-0780 affects cf-release v231 and Pivotal Cloud Foundry Elastic Runtime versions prior to 1.5.17 and 1.6.18.
Can CVE-2016-0780 lead to data loss?
Yes, CVE-2016-0780 could potentially allow an attacker to manipulate disk quotas, leading to data loss.
Is there a workaround for CVE-2016-0780?
There is no documented workaround for CVE-2016-0780; users are advised to apply the latest security patches.