VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Apr 30, 2018· Updated Jun 17, 2026

CVE-2018-1277

CVE-2018-1277

Description

Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an app with a malicious Docker image that will consume more space on a Diego cell than allocated in their quota, potentially causing a DoS against the cell.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Cloudfoundry/Cf Deployment
    cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*
    Range: <1.28.0
  • Cloudfoundry/Garden-runC2 versions
    cpe:2.3:a:cloudfoundry:garden-runc:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cloudfoundry:garden-runc:*:*:*:*:*:*:*:*range: <1.13.0
    • (no CPE)range: <1.13.0
  • Cloud Foundry/Garden-runCv5
    Range: 1.13.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.