Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

Red Hat Openshift Sandboxed Containers

Source -

CNA

CNA CVEs -

1

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
1Vulnerabilities found

CVE-2024-3727
Assigner-Red Hat, Inc.
ShareView Details
Assigner-Red Hat, Inc.
CVSS Score-8.3||HIGH
EPSS-0.56% / 67.70%
||
7 Day CHG~0.00%
Published-09 May, 2024 | 14:57
Updated-03 Feb, 2026 | 21:31
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Containers/image: digest type does not guarantee valid type

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Action-Not Available
Vendor-Red Hat, Inc.
Product-Red Hat Enterprise Linux 7Multicluster Engine for KubernetesRed Hat OpenShift Container Platform 4.15RHEL-9-CNV-4.15Red Hat Quay 3Red Hat Ansible Automation Platform 1.2Red Hat OpenShift Virtualization 4Red Hat Advanced Cluster Security 3Red Hat OpenShift Container Platform 4Red Hat Advanced Cluster Management for Kubernetes 2Red Hat Ansible Automation Platform 2Red Hat OpenStack Platform 16.2Red Hat Advanced Cluster Security 4.5Red Hat Advanced Cluster Security 4.4Red Hat OpenShift Container Platform 3.11OpenShift Source-to-Image (S2I)Red Hat Enterprise Linux 10OpenShift ServerlessRed Hat Enterprise Linux 8Red Hat Openshift Sandboxed ContainersRed Hat OpenShift Container Platform 4.16Red Hat Enterprise Linux 9Red Hat OpenShift Container Platform Assisted Installer 1Red Hat OpenShift Container Platform 4.13Red Hat OpenShift Container Platform 4.17Red Hat Migration Toolkit for Containers 1.8Red Hat OpenShift Dev SpacesOADP-1.3-RHEL-9OpenShift Developer Tools and ServicesRed Hat OpenShift Container Platform 4.18Red Hat OpenShift Container Platform 4.14
CWE ID-CWE-354
Improper Validation of Integrity Check Value