PT-2017-7659 · Pivotal · Pivotal Cloud Foundry (Pcf) Elastic Runtime+1

Publicado 2017-05-25 · Atualizado 2021-08-25 · CVE-2016-0780

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions cf-release versions prior to v231 Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18

Description The issue is related to the improper enforcement of disk quotas in certain cases. An attacker could exploit this by using an improper disk quota value to bypass enforcement, potentially consuming all the disk on DEAs/CELLs and causing a denial of service for other applications.

Recommendations For cf-release versions prior to v231, update to a version higher than v231 to resolve the issue. For Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17, update to version 1.5.17 or higher to resolve the issue. For Pivotal Cloud Foundry Elastic Runtime 1.6.x versions prior to 1.6.18, update to version 1.6.18 or higher to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-0780

Produtos afetados

Pivotal Cloud Foundry (Pcf) Elastic Runtime

Cf-Release

Referências · 4

• https://pivotal.io/security/cve-2016-0780 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-0780 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0780 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-0780 · Nota de Segurança