CVE-2016-0761

CRITICAL

9.8

Beschreibung

Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other container filesystems on the host.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht5/25/2017

Zuletzt geandert4/20/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

cloudfoundry:garden_linuxpivotal_software:cloud_foundry_elastic_runtime

Schwachen (CWE)

CWE-19

Referenzen

https://pivotal.io/security/cve-2016-0761(security_alert@emc.com)

https://pivotal.io/security/cve-2016-0761(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.