CVE-2018-11084 — Foundry Garden-runc vulnerability

3 documents3 sources
Severity
6.5MEDIUMNVD
CNA6.8
EPSS
0.3%
top 51.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cloud Foundry Garden-runcCloudfoundry Garden-runc
Timeline
PublishedSep 18
Latest updateMay 13

Description

Cloud Foundry Garden-runC release, versions prior to 1.16.1, prevents deletion of some app environments based on file attributes. A remote authenticated malicious user may create and delete apps with crafted file attributes to cause a denial of service for new app instances or scaling up of existing apps.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5cloud_foundry/garden-runcall versions — 1.16.1

🔴Vulnerability Details

2
GHSA
GHSA-hpg7-3mv4-7gc8: Cloud Foundry Garden-runC release, versions prior to 1↗2022-05-13
▶
CVEList
Garden-runC prevents deletion of some app environments↗2018-09-18
▶
CVE-2018-11084 — Foundry Garden-runc vulnerability | cvebase