Cloudfoundry Garden Runc vulnerabilities

2 vulnerabilities

Known vulnerabilities in Cloudfoundry Garden Runc, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2018-1277cloud foundrygarden-runc+2
EPSS score
1.10%
Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an app with a malicious Docker image that will consume more space on a Diego cell than allocated in their quota, potentially causing a DoS against the cell.6.8CVE-2018-11084cloud foundrygarden-runc+1
EPSS score
1.18%
Cloud Foundry Garden-runC release, versions prior to 1.16.1, prevents deletion of some app environments based on file attributes. A remote authenticated malicious user may create and delete apps with crafted file attributes to cause a denial of service for new app instances or scaling up of existing apps.