Skip to content

CVE-2016-0761 Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to...

CriticalCVSS 9.8 EPSS 1.6%
Published
Updated
Exploit status
No public exploit known

Description

Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other container filesystems on the host.

Affected products

ProductAffected versionsFixed in
cloudfoundry garden linux <= 0.332.0 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.0 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.1 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.2 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.3 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.4 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.5 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.6 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.7 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.8 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.9 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.10 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.11 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.12 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.13 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.14 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.15 No fix listed
pivotal software cloud foundry elastic runtime = 1.6.16 No fix listed
pivotal Cloud Foundry = Garden-Linux versions prior to v0.333.0 No fix listed
pivotal Cloud Foundry = Elastic Runtime 1.6.x version prior to 1.6.17. No fix listed

References