cbcvebase.
CVE-2016-0761
published 2017-05-25

CVE-2016-0761: Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files during…

PriorityP345critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.60%
72.9th percentile
Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other container filesystems on the host.

Affected

20 ranges
VendorProductVersion rangeFixed in
cloudfoundrygarden_linux<= 0.332.0—
pivotalcloud_foundry——
pivotalcloud_foundry——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——
pivotal_softwarecloud_foundry_elastic_runtime——

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.