Lucene search
GoogleOSV:CVE-2017-14388HistoryNov 13, 2017 - 5:29 p.m.
CVE-2017-14388
2017-11-1317:29:00
Google
osv.dev
2
Cloud Foundry Foundation GrootFS release 0.3.x versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poison the grootfs volume cache. For example, this could allow an attacker to provide an image layer that GrootFS would consider to be the Ubuntu base layer.
References
Related
nvd
nvd
CVE-2017-14388
2017-11-13 17:29:00
cloudfoundry
cloudfoundry
CVE-2017-14388: GrootFS doesn't validate DiffIDs | Cloud Foundry
2017-11-09 00:00:00
prion
prion
Design/Logic Flaw
2017-11-13 17:29:00
cvelist
cvelist
CVE-2017-14388
2017-11-13 17:00:00
cve
cve
CVE-2017-14388
2017-11-13 17:29:00