CVE-2018-1277

Cloud Foundry Garden-runC vulnerability (CVE-2018-1277): Garden-runC/ cf-deployment prior to fixed versions fail to enforce disk quotas for Docker image layers, allowing a remote authenticated user to push a malicious image that can exhaust Diego cell disk space and cause a DoS. Affected: Garden-...

CVE-2018-11084

CVE-2018-11084 affects Cloud Foundry Garden-runC releases before 1.16.1. The vulnerability allows a remote authenticated attacker to influence app environments by manipulating file attributes, causing denial of service for new or scaling app instances. The issue is tied to Garden-runC behavior an...