Authenticated Registry Access Path Traversal in containers/image
CVE-2024-3727 Published on May 14, 2024

Containers/image: digest type does not guarantee valid type
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2024-3727 can be exploited with network access, requires user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Timeline

Reported to Red Hat.

Made public. 27 days later.

Weakness Type

Improper Validation of Integrity Check Value

The software does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission. Improper validation of checksums before use results in an unnecessary risk that can easily be mitigated. The protocol specification describes the algorithm used for calculating the checksum. It is then a simple matter of implementing the calculation and verifying that the calculated checksum and the received checksum match. Improper verification of the calculated checksum and the received checksum can lead to far greater consequences.


Products Associated with CVE-2024-3727

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Openshift Api Data Protection
 
Red Hat Advanced Cluster Security
 
Red Hat Enterprise Linux (RHEL)
 
Red Hat Rhmt
 
Red Hat Openshift
 
Red Hat Openshift Ironic
 
Red Hat Container Native Virtualization
 
Red Hat Multicluster Engine
 
Red Hat Ocp Tools
 
Red Hat Serverless
 
Red Hat Source To Image
 
Red Hat Acm
 
Red Hat Ansible Automation Platform
 
Red Hat Assisted Installer
 
Red Hat Openshift Devspaces
 
Red Hat Openshift Sandboxed Containers
 
Red Hat Openstack
 
Red Hat Quay
 

Exploit Probability

EPSS
0.56%
Percentile
67.97%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.