Vulnerability Description
It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18 do not properly enforce disk quotas in certain cases. An attacker could use an improper disk quota value to bypass enforcement and consume all the disk on DEAs/CELLs causing a potential denial of service for other applications.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cloudfoundry | Cf-Release | 231 |
| Pivotal Software | Cloud Foundry Elastic Runtime | 1.5.0 |
Related Weaknesses (CWE)
References
- https://pivotal.io/security/cve-2016-0780Vendor Advisory
- https://pivotal.io/security/cve-2016-0780Vendor Advisory
FAQ
What is CVE-2016-0780?
CVE-2016-0780 is a vulnerability with a CVSS score of 7.5 (HIGH). It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18 do not p...
How severe is CVE-2016-0780?
CVE-2016-0780 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-0780?
Check the references section above for vendor advisories and patch information. Affected products include: Cloudfoundry Cf-Release, Pivotal Software Cloud Foundry Elastic Runtime.