vulnerability

Red Hat OpenShift: CVE-2024-3727: containers/image: digest type does not guarantee valid type

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
May 14, 2024
Added
Jun 28, 2024
Modified
Feb 26, 2025

Description

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Solution(s)

linuxrpm-upgrade-cri-olinuxrpm-upgrade-podmanlinuxrpm-upgrade-rhcoslinuxrpm-upgrade-skopeo

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today