CVE-2016-0761

Critical

Published: 25/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x versions prior to 1.6.17 contain a flaw in managing container files during Docker image preparation. This flaw could be exploited to delete, corrupt, or overwrite host files and directories, including other container filesystems on the host.

Risk Assessment

The organization may be exposed to data loss or filesystem corruption, potentially leading to downtime and serious service availability issues.

Recommendation

It is recommended to update Cloud Foundry Garden-Linux to version v0.333.0 or later and Elastic Runtime to version 1.6.17 or later to mitigate this vulnerability.

Original NVD description (English source)

Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other container filesystems on the host.