CVE-2016-0780

Source
https://cve.org/CVERecord?id=CVE-2016-0780
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0780.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-0780
Published
2017-05-25T17:29:00.520Z
Modified
2026-07-08T05:45:44.010935808Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18 do not properly enforce disk quotas in certain cases. An attacker could use an improper disk quota value to bypass enforcement and consume all the disk on DEAs/CELLs causing a potential denial of service for other applications.

Database specific
{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:a:cloudfoundry:cf-release:231:*:*:*:*:*:*:*"
            ],
            "vendor_product": "cloudfoundry:cf-release",
            "extracted_events": [
                {
                    "introduced": "231"
                },
                {
                    "last_affected": "231"
                }
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "1.5.0"
                },
                {
                    "last_affected": "1.5.0"
                },
                {
                    "introduced": "1.5.5"
                },
                {
                    "last_affected": "1.5.5"
                },
                {
                    "introduced": "1.5.5"
                },
                {
                    "last_affected": "1.5.5"
                },
                {
                    "introduced": "1.5.6"
                },
                {
                    "last_affected": "1.5.6"
                },
                {
                    "introduced": "1.5.6"
                },
                {
                    "last_affected": "1.5.6"
                },
                {
                    "introduced": "1.5.7"
                },
                {
                    "last_affected": "1.5.7"
                },
                {
                    "introduced": "1.5.7"
                },
                {
                    "last_affected": "1.5.7"
                },
                {
                    "introduced": "1.5.8"
                },
                {
                    "last_affected": "1.5.8"
                },
                {
                    "introduced": "1.5.8"
                },
                {
                    "last_affected": "1.5.8"
                },
                {
                    "introduced": "1.5.9"
                },
                {
                    "last_affected": "1.5.9"
                },
                {
                    "introduced": "1.5.9"
                },
                {
                    "last_affected": "1.5.9"
                },
                {
                    "introduced": "1.5.10"
                },
                {
                    "last_affected": "1.5.10"
                },
                {
                    "introduced": "1.5.10"
                },
                {
                    "last_affected": "1.5.10"
                },
                {
                    "introduced": "1.5.11"
                },
                {
                    "last_affected": "1.5.11"
                },
                {
                    "introduced": "1.5.11"
                },
                {
                    "last_affected": "1.5.11"
                },
                {
                    "introduced": "1.5.12"
                },
                {
                    "last_affected": "1.5.12"
                },
                {
                    "introduced": "1.5.12"
                },
                {
                    "last_affected": "1.5.12"
                },
                {
                    "introduced": "1.5.13"
                },
                {
                    "last_affected": "1.5.13"
                },
                {
                    "introduced": "1.5.13"
                },
                {
                    "last_affected": "1.5.13"
                },
                {
                    "introduced": "1.5.14"
                },
                {
                    "last_affected": "1.5.14"
                },
                {
                    "introduced": "1.5.14"
                },
                {
                    "last_affected": "1.5.14"
                },
                {
                    "introduced": "1.5.15"
                },
                {
                    "last_affected": "1.5.15"
                },
                {
                    "introduced": "1.5.15"
                },
                {
                    "last_affected": "1.5.15"
                },
                {
                    "introduced": "1.5.16"
                },
                {
                    "last_affected": "1.5.16"
                },
                {
                    "introduced": "1.5.16"
                },
                {
                    "last_affected": "1.5.16"
                },
                {
                    "introduced": "1.6.6"
                },
                {
                    "last_affected": "1.6.6"
                },
                {
                    "introduced": "1.6.6"
                },
                {
                    "last_affected": "1.6.6"
                },
                {
                    "introduced": "1.6.7"
                },
                {
                    "last_affected": "1.6.7"
                },
                {
                    "introduced": "1.6.7"
                },
                {
                    "last_affected": "1.6.7"
                },
                {
                    "introduced": "1.6.8"
                },
                {
                    "last_affected": "1.6.8"
                },
                {
                    "introduced": "1.6.8"
                },
                {
                    "last_affected": "1.6.8"
                },
                {
                    "introduced": "1.6.9"
                },
                {
                    "last_affected": "1.6.9"
                },
                {
                    "introduced": "1.6.9"
                },
                {
                    "last_affected": "1.6.9"
                },
                {
                    "introduced": "1.6.10"
                },
                {
                    "last_affected": "1.6.10"
                },
                {
                    "introduced": "1.6.10"
                },
                {
                    "last_affected": "1.6.10"
                },
                {
                    "introduced": "1.6.11"
                },
                {
                    "last_affected": "1.6.11"
                },
                {
                    "introduced": "1.6.11"
                },
                {
                    "last_affected": "1.6.11"
                },
                {
                    "introduced": "1.6.12"
                },
                {
                    "last_affected": "1.6.12"
                },
                {
                    "introduced": "1.6.12"
                },
                {
                    "last_affected": "1.6.12"
                },
                {
                    "introduced": "1.6.13"
                },
                {
                    "last_affected": "1.6.13"
                },
                {
                    "introduced": "1.6.13"
                },
                {
                    "last_affected": "1.6.13"
                },
                {
                    "introduced": "1.6.14"
                },
                {
                    "last_affected": "1.6.14"
                },
                {
                    "introduced": "1.6.14"
                },
                {
                    "last_affected": "1.6.14"
                },
                {
                    "introduced": "1.6.15"
                },
                {
                    "last_affected": "1.6.15"
                },
                {
                    "introduced": "1.6.15"
                },
                {
                    "last_affected": "1.6.15"
                },
                {
                    "introduced": "1.6.16"
                },
                {
                    "last_affected": "1.6.16"
                },
                {
                    "introduced": "1.6.16"
                },
                {
                    "last_affected": "1.6.16"
                },
                {
                    "introduced": "1.6.17"
                },
                {
                    "last_affected": "1.6.17"
                },
                {
                    "introduced": "1.6.17"
                },
                {
                    "last_affected": "1.6.17"
                }
            ],
            "cpes": [
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.10:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.11:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.12:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.13:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.14:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.15:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.16:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.9:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.10:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.11:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.12:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.13:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.14:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.15:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.16:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.17:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.9:*:*:*:*:*:*:*"
            ],
            "vendor_product": "pivotal_software:cloud_foundry_elastic_runtime",
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/cloudfoundry/uaa

Affected ranges

Type
GIT
Repo
https://github.com/cloudfoundry/uaa
Events
Database specific
{
    "cpe": [
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.5.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:1.6.5:*:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "1.5.0"
        },
        {
            "last_affected": "1.5.0"
        },
        {
            "introduced": "1.5.1"
        },
        {
            "last_affected": "1.5.1"
        },
        {
            "introduced": "1.5.2"
        },
        {
            "last_affected": "1.5.2"
        },
        {
            "introduced": "1.5.3"
        },
        {
            "last_affected": "1.5.3"
        },
        {
            "introduced": "1.5.4"
        },
        {
            "last_affected": "1.5.4"
        },
        {
            "introduced": "1.6.0"
        },
        {
            "last_affected": "1.6.0"
        },
        {
            "introduced": "1.6.1"
        },
        {
            "last_affected": "1.6.1"
        },
        {
            "introduced": "1.6.2"
        },
        {
            "last_affected": "1.6.2"
        },
        {
            "introduced": "1.6.3"
        },
        {
            "last_affected": "1.6.3"
        },
        {
            "introduced": "1.6.4"
        },
        {
            "last_affected": "1.6.4"
        },
        {
            "introduced": "1.6.5"
        },
        {
            "last_affected": "1.6.5"
        }
    ]
}

Affected versions

1.*
1.5.0
1.5.1
1.5.2
1.5.2.1
1.5.3
1.5.4
1.5.4.1
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0780.json"