Description

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

INFO

Published Date :

2024-05-09T14:57:21.327Z

Last Modified :

2026-04-29T18:07:23.359Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2024-3727 vulnerability.

Vendors Products
Redhat
  • Acm
  • Advanced Cluster Security
  • Ansible Automation Platform
  • Assisted Installer
  • Container Native Virtualization
  • Enterprise Linux
  • Multicluster Engine
  • Ocp Tools
  • Openshift
  • Openshift Api Data Protection
  • Openshift Devspaces
  • Openshift Ironic
  • Openshift Sandboxed Containers
  • Openstack
  • Quay
  • Rhmt
  • Serverless
  • Source To Image
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-3727.

URL Resource
https://access.redhat.com/errata/RHSA-2024:0045 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:3718 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:4159 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:4613 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:4850 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:4960 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:5258 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:5951 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:6054 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:6122 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:6708 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:6818 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:6824 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:7164 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:7174 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:7182 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:7187 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:7922 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:7941 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:8260 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:8425 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:9097 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:9098 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:9102 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2024:9960 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2024-3727 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2274767 cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ/ cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN/ cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-3727 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-3727 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact