CVE-2018-1277

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-1277

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1277.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-1277

Published

2018-04-30T20:29:00Z

Modified

2026-07-08T14:14:52Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an app with a malicious Docker image that will consume more space on a Diego cell than allocated in their quota, potentially causing a DoS against the cell.

References

https://www.cloudfoundry.org/blog/cve-2018-1277/

Affected packages

Git / github.com/cloudfoundry/cf-deployment

Affected ranges

Type

GIT

Repo

https://github.com/cloudfoundry/cf-deployment

Events

Introduced

Fixed

cae6b134d5ac1ec57ee329d6f873f28565695e5c

Database specific

Show details

{
    "cpe": "cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.28.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v0.*

v0.0.0

v0.0.1

v0.0.2

v0.1.0

v0.10.0

v0.11.0

v0.12.0

v0.13.0

v0.14.0

v0.15.0

v0.2.0

v0.2.1

v0.2.2

v0.28.0

v0.29.0

v0.3.0

v0.30.0

v0.31.0

v0.32.0

v0.33.0

v0.34.0

v0.35.0

v0.36.0

v0.37.0

v0.5.0

v0.7.0

v0.8.0

v0.9.0

v0.9.1

v1.*

v1.0.0

v1.1.0

v1.10.0

v1.11.0

v1.12.0

v1.13.0

v1.14.0

v1.15.0

v1.16.0

v1.17.0

v1.18.0

v1.19.0

v1.2.0

v1.20.0

v1.21.0

v1.22.0

v1.23.0

v1.24.0

v1.25.0

v1.26.0

v1.27.0

v1.3.0

v1.4.0

v1.5.0

v1.6.0

v1.7.0

v1.8.0

v1.9.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1277.json"

Git / github.com/cloudfoundry/garden-runc-release

Affected ranges

Type

GIT

Repo

https://github.com/cloudfoundry/garden-runc-release

Events

Introduced

Fixed

d601aaf2b9b26746fa2beabd1d1f86560549c12d

Database specific

Show details

{
    "cpe": "cpe:2.3:a:cloudfoundry:garden-runc:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.13.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v0.*

v0.1.0

v0.2.0

v0.4.0

v0.5.0

v0.6.0

v0.8.0

v0.9.0

v0.9.1

v0.9.2

v0.9.3

v1.*

v1.0.0

v1.0.1

v1.0.2

v1.0.3

v1.0.4

v1.1.0

v1.1.1