vulnerability

SUSE: CVE-2024-3727: SUSE Linux Security Advisory

Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
05/14/2024
Added
05/30/2024
Modified
02/18/2025

Description

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Solution(s)

suse-upgrade-apptainersuse-upgrade-apptainer-leapsuse-upgrade-apptainer-sle15_5suse-upgrade-apptainer-sle15_6suse-upgrade-buildahsuse-upgrade-containerized-data-importer-apisuse-upgrade-containerized-data-importer-clonersuse-upgrade-containerized-data-importer-controllersuse-upgrade-containerized-data-importer-importersuse-upgrade-containerized-data-importer-manifestssuse-upgrade-containerized-data-importer-operatorsuse-upgrade-containerized-data-importer-uploadproxysuse-upgrade-containerized-data-importer-uploadserversuse-upgrade-dockersuse-upgrade-docker-bash-completionsuse-upgrade-docker-fish-completionsuse-upgrade-docker-rootless-extrassuse-upgrade-docker-zsh-completionsuse-upgrade-govulncheck-vulndbsuse-upgrade-libsquashfuse0suse-upgrade-obs-service-cdi_containers_metasuse-upgrade-podmansuse-upgrade-podman-cni-configsuse-upgrade-podman-dockersuse-upgrade-podman-remotesuse-upgrade-podmanshsuse-upgrade-skopeosuse-upgrade-skopeo-bash-completionsuse-upgrade-skopeo-fish-completionsuse-upgrade-skopeo-zsh-completionsuse-upgrade-squashfusesuse-upgrade-squashfuse-develsuse-upgrade-squashfuse-toolssuse-upgrade-warewulf4suse-upgrade-warewulf4-mansuse-upgrade-warewulf4-overlaysuse-upgrade-warewulf4-overlay-slurm
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.