Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-0780

It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prio

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18 do not properly enforce disk quotas in certain cases. An attacker could use an improper disk quota value to bypass enforcement and consume all the disk on DEAs/CELLs causing a potential denial of service for other applications.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pivotal Cloud Foundry

  • cf-release v231 and loweraffected
  • Elastic Runtime 1.5.x versions prior to 1.5.17affected
  • Elastic Runtime 1.6.x versions prior to 1.6.18affected

References