Cloudfoundry Garden-Runc vulnerabilities

2 CVEs affecting Cloudfoundry Garden-Runc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-11084, published 2018-09-18.

More from Cloudfoundry.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-11084, published 2018-09-18. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. Cloud Foundry Garden-runC release, versions prior to 1.16.1, prevents deletion of some app environments based on file attributes. A remote authenticated malicious user may create and delete apps with…
• CVE-2018-1277, published 2018-04-30. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an app with a malicious Docker image that…