2024-05-14 16:04:21 +00:00
{
"id" : "CVE-2024-3727" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2024-05-14T15:42:07.060" ,
2025-02-25 09:04:02 +00:00
"lastModified" : "2025-02-25T08:15:29.150" ,
2024-05-14 18:03:25 +00:00
"vulnStatus" : "Awaiting Analysis" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2024-05-14 16:04:21 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks."
2024-05-19 02:03:31 +00:00
} ,
{
"lang" : "es" ,
"value" : "Se encontr\u00f3 una falla en la librer\u00eda github.com/containers/image. Esta falla permite a los atacantes activar accesos inesperados al registro autenticado en nombre de un usuario v\u00edctima, lo que provoca agotamiento de recursos, path traversal local y otros ataques."
2024-05-14 16:04:21 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "secalert@redhat.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" ,
2024-11-23 17:04:17 +00:00
"baseScore" : 8.3 ,
"baseSeverity" : "HIGH" ,
2024-05-14 16:04:21 +00:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-11-23 17:04:17 +00:00
"availabilityImpact" : "HIGH"
2024-05-14 16:04:21 +00:00
} ,
"exploitabilityScore" : 1.6 ,
"impactScore" : 6.0
}
]
} ,
"weaknesses" : [
{
"source" : "secalert@redhat.com" ,
2024-11-23 17:04:17 +00:00
"type" : "Secondary" ,
2024-05-14 16:04:21 +00:00
"description" : [
{
"lang" : "en" ,
"value" : "CWE-354"
}
]
}
] ,
"references" : [
2024-06-27 18:03:11 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:0045" ,
"source" : "secalert@redhat.com"
2024-07-03 18:04:02 +00:00
} ,
2024-10-01 23:58:16 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:3718" ,
"source" : "secalert@redhat.com"
} ,
2024-07-03 18:04:02 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:4159" ,
"source" : "secalert@redhat.com"
2024-07-24 22:03:12 +00:00
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:4613" ,
"source" : "secalert@redhat.com"
2024-08-02 18:03:14 +00:00
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:4850" ,
"source" : "secalert@redhat.com"
2024-08-07 18:03:14 +00:00
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:4960" ,
"source" : "secalert@redhat.com"
2024-08-13 18:03:14 +00:00
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:5258" ,
"source" : "secalert@redhat.com"
2024-06-27 18:03:11 +00:00
} ,
2024-05-14 16:04:21 +00:00
{
2024-08-29 20:03:14 +00:00
"url" : "https://access.redhat.com/errata/RHSA-2024:5951" ,
2024-06-10 18:03:10 +00:00
"source" : "secalert@redhat.com"
} ,
2024-08-29 23:58:13 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6054" ,
"source" : "secalert@redhat.com"
} ,
2025-02-25 09:04:02 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6122" ,
"source" : "secalert@redhat.com"
} ,
2024-09-16 23:58:14 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6708" ,
"source" : "secalert@redhat.com"
} ,
2025-01-20 11:03:53 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6818" ,
"source" : "secalert@redhat.com"
} ,
2024-09-25 02:03:16 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6824" ,
"source" : "secalert@redhat.com"
} ,
2024-09-26 06:03:17 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:7164" ,
"source" : "secalert@redhat.com"
} ,
2024-10-02 12:03:16 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:7174" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:7182" ,
"source" : "secalert@redhat.com"
} ,
2024-10-03 14:03:20 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:7187" ,
"source" : "secalert@redhat.com"
} ,
2024-10-16 08:03:22 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:7922" ,
"source" : "secalert@redhat.com"
} ,
2024-10-17 02:03:21 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:7941" ,
"source" : "secalert@redhat.com"
} ,
2024-10-24 20:03:28 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:8260" ,
"source" : "secalert@redhat.com"
} ,
2024-10-31 07:03:20 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:8425" ,
"source" : "secalert@redhat.com"
} ,
2024-11-12 17:03:24 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:9097" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:9098" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:9102" ,
"source" : "secalert@redhat.com"
} ,
2024-11-23 17:04:17 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:9960" ,
"source" : "secalert@redhat.com"
} ,
2024-06-10 18:03:10 +00:00
{
2024-08-29 20:03:14 +00:00
"url" : "https://access.redhat.com/security/cve/CVE-2024-3727" ,
2024-06-10 18:03:10 +00:00
"source" : "secalert@redhat.com"
2024-06-11 06:03:11 +00:00
} ,
{
2024-08-29 20:03:14 +00:00
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2274767" ,
2024-06-11 06:03:11 +00:00
"source" : "secalert@redhat.com"
2024-11-23 17:04:17 +00:00
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:0045" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:4159" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:4613" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://access.redhat.com/security/cve/CVE-2024-3727" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2274767" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2024-05-14 16:04:21 +00:00
}
]
}
