It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18 do not properly enforce disk quotas in certain cases. An attacker could use an improper disk quota value to bypass enforcement and consume all the disk on DEAs/CELLs causing a potential denial of service for other applications.
{
"unresolved_ranges": [
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:cloudfoundry:cf-release:231:*:*:*:*:*:*:*"
],
"vendor_product": "cloudfoundry:cf-release",
"extracted_events": [
{
"introduced": "231"
},
{
"last_affected": "231"
}
]
},
{
"extracted_events": [
{
"introduced": "1.5.0"
},
{
"last_affected": "1.5.0"
},
{
"introduced": "1.5.5"
},
{
"last_affected": "1.5.5"
},
{
"introduced": "1.5.5"
},
{
"last_affected": "1.5.5"
},
{
"introduced": "1.5.6"
},
{
"last_affected": "1.5.6"
},
{
"introduced": "1.5.6"
},
{
"last_affected": "1.5.6"
},
{
"introduced": "1.5.7"
},
{
"last_affected": "1.5.7"
},
{
"introduced": "1.5.7"
},
{
"last_affected": "1.5.7"
},
{
"introduced": "1.5.8"
},
{
"last_affected": "1.5.8"
},
{
"introduced": "1.5.8"
},
{
"last_affected": "1.5.8"
},
{
"introduced": "1.5.9"
},
{
"last_affected": "1.5.9"
},
{
"introduced": "1.5.9"
},
{
"last_affected": "1.5.9"
},
{
"introduced": "1.5.10"
},
{
"last_affected": "1.5.10"
},
{
"introduced": "1.5.10"
},
{
"last_affected": "1.5.10"
},
{
"introduced": "1.5.11"
},
{
"last_affected": "1.5.11"
},
{
"introduced": "1.5.11"
},
{
"last_affected": "1.5.11"
},
{
"introduced": "1.5.12"
},
{
"last_affected": "1.5.12"
},
{
"introduced": "1.5.12"
},
{
"last_affected": "1.5.12"
},
{
"introduced": "1.5.13"
},
{
"last_affected": "1.5.13"
},
{
"introduced": "1.5.13"
},
{
"last_affected": "1.5.13"
},
{
"introduced": "1.5.14"
},
{
"last_affected": "1.5.14"
},
{
"introduced": "1.5.14"
},
{
"last_affected": "1.5.14"
},
{
"introduced": "1.5.15"
},
{
"last_affected": "1.5.15"
},
{
"introduced": "1.5.15"
},
{
"last_affected": "1.5.15"
},
{
"introduced": "1.5.16"
},
{
"last_affected": "1.5.16"
},
{
"introduced": "1.5.16"
},
{
"last_affected": "1.5.16"
},
{
"introduced": "1.6.6"
},
{
"last_affected": "1.6.6"
},
{
"introduced": "1.6.6"
},
{
"last_affected": "1.6.6"
},
{
"introduced": "1.6.7"
},
{
"last_affected": "1.6.7"
},
{
"introduced": "1.6.7"
},
{
"last_affected": "1.6.7"
},
{
"introduced": "1.6.8"
},
{
"last_affected": "1.6.8"
},
{
"introduced": "1.6.8"
},
{
"last_affected": "1.6.8"
},
{
"introduced": "1.6.9"
},
{
"last_affected": "1.6.9"
},
{
"introduced": "1.6.9"
},
{
"last_affected": "1.6.9"
},
{
"introduced": "1.6.10"
},
{
"last_affected": "1.6.10"
},
{
"introduced": "1.6.10"
},
{
"last_affected": "1.6.10"
},
{
"introduced": "1.6.11"
},
{
"last_affected": "1.6.11"
},
{
"introduced": "1.6.11"
},
{
"last_affected": "1.6.11"
},
{
"introduced": "1.6.12"
},
{
"last_affected": "1.6.12"
},
{
"introduced": "1.6.12"
},
{
"last_affected": "1.6.12"
},
{
"introduced": "1.6.13"
},
{
"last_affected": "1.6.13"
},
{
"introduced": "1.6.13"
},
{
"last_affected": "1.6.13"
},
{
"introduced": "1.6.14"
},
{
"last_affected": "1.6.14"
},
{
"introduced": "1.6.14"
},
{
"last_affected": "1.6.14"
},
{
"introduced": "1.6.15"
},
{
"last_affected": "1.6.15"
},
{
"introduced": "1.6.15"
},
{
"last_affected": "1.6.15"
},
{
"introduced": "1.6.16"
},
{
"last_affected": "1.6.16"
},
{
"introduced": "1.6.16"
},
{
"last_affected": "1.6.16"
},
{
"introduced": "1.6.17"
},
{
"last_affected": "1.6.17"
},
{
"introduced": "1.6.17"
},
{
"last_affected": "1.6.17"
}
],
"cpes": [
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.0:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.10:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.11:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.12:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.13:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.14:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.15:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.16:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.5:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.8:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.9:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.16:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.17:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9:*:*:*:*:*:*:*"
],
"vendor_product": "pivotal_software:cloud_foundry_elastic_runtime",
"source": "CPE_STRING"
}
]
}{
"cpe": [
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.0:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4:*:*:*:*:*:*:*",
"cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5:*:*:*:*:*:*:*"
],
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "1.5.0"
},
{
"last_affected": "1.5.0"
},
{
"introduced": "1.5.1"
},
{
"last_affected": "1.5.1"
},
{
"introduced": "1.5.2"
},
{
"last_affected": "1.5.2"
},
{
"introduced": "1.5.3"
},
{
"last_affected": "1.5.3"
},
{
"introduced": "1.5.4"
},
{
"last_affected": "1.5.4"
},
{
"introduced": "1.6.0"
},
{
"last_affected": "1.6.0"
},
{
"introduced": "1.6.1"
},
{
"last_affected": "1.6.1"
},
{
"introduced": "1.6.2"
},
{
"last_affected": "1.6.2"
},
{
"introduced": "1.6.3"
},
{
"last_affected": "1.6.3"
},
{
"introduced": "1.6.4"
},
{
"last_affected": "1.6.4"
},
{
"introduced": "1.6.5"
},
{
"last_affected": "1.6.5"
}
]
}