CVE-2018-11084

Cloud Foundry Garden-runC release, versions prior to 1.16.1, prevents deletion of some app environments based on file attributes. A remote authenticated malicious user may create and delete apps with crafted file attributes to cause a denial of service for new app instances or scaling up of existing apps.

Score

CVSS 3.0 6.8 Medium

Status

Modified - security_alert@emc.com

Published

2018-09-18

Last modified

2024-09-16

Affected products

• Garden-runc (Cloud Foundry)
• Garden-runc (Cloudfoundry)

References

• https://www.cloudfoundry.org/blog/cve-2018-11084/