CVE-2018-1277: Medium severity Cloudfoundry Garden-runc vulnerability
Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an app with a malicious Docker image that will consume more space on a Diego cell than allocated in their quota, potentially causing a DoS against the cell.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1277?
CVE-2018-1277 is a vulnerability in Cloud Foundry Garden-runC versions prior to 1.13.0 that allows a remote authenticated user to consume more disk space than allocated, potentially causing a denial-of-service (DoS) attack.
How does CVE-2018-1277 impact Cloud Foundry Garden-runC?
CVE-2018-1277 allows a remote authenticated user to push a malicious Docker image that exceeds the disk quota, potentially causing a DoS against a Diego cell.
What is the severity of CVE-2018-1277?
CVE-2018-1277 has a severity rating of medium, with a CVSS score of 6.5.
Which versions of Cloud Foundry Garden-runC are affected by CVE-2018-1277?
Versions of Cloud Foundry Garden-runC prior to 1.13.0 are affected by CVE-2018-1277.
How can I fix CVE-2018-1277?
To fix CVE-2018-1277, upgrade to Cloud Foundry Garden-runC version 1.13.0 or later.