Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-3727

27
FAUCET Score

CVE-2024-3727 is a high-severity flaw in the github.com/containers/image library that enables attackers to force authenticated registry accesses, leading to resource exhaustion, local path traversal, and other attacks. With a CVSS score of 8.3, this vulnerability requires user interaction and has high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
All Versions ImpactedCPE match
cpe:2.3:a:redhat:openshift_serverless:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.3HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.6
Impact Score
6.0
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.28%
Probability of exploitation in next 30 days
EPSS Percentile
67.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0128 is in the 47th percentile among its peer group of 1,572 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.6 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (181)

gopatch availablevia ghsa
Product: github.com/containers/image/v5Fixed in: 5.30.1
gopatch availablevia ghsa
Product: github.com/containers/imageFixed in: 5.30.1
gopatch availablevia ghsa
Product: github.com/containers/image/v5Fixed in: 5.29.3
microsoftpatch availablevia msrc
Product: 17699-17084Fixed in: 20240213-2
microsoftpatch availablevia msrc
Product: 17793-17084Fixed in: 20240213-2
microsoftpatch availablevia msrc
Product: 19792-17086Fixed in: 20210626-7
microsoftpatch availablevia msrc
Product: cbl2 libcontainers-common 20210626-7 on CBL Mariner 2.0Fixed in: 20210626-7
microsoftpatch availablevia msrc
Product: azl3 libcontainers-common 20240213-3 on Azure Linux 3.0Fixed in: 20240213-2
microsoftpatch availablevia msrc
Product: azl3 libcontainers-common 20240213-2 on Azure Linux 3.0Fixed in: 20240213-2
microsoftpatch availablevia msrc
Product: azl3 containerized-data-importer 1.57.0-2 on Azure Linux 3.0Fixed in: 1.57.0-2
microsoftpatch availablevia msrc
Product: azl3 skopeo 1.14.1-1 on Azure Linux 3.0Fixed in: 1.14.4-1
microsoftpatch availablevia msrc
Product: azl3 skopeo 1.14.4-1 on Azure Linux 3.0Fixed in: 1.14.4-1
microsoftpatch availablevia msrc
Product: azl3 ig 0.25.0-2 on Azure Linux 3.0Fixed in: 0.29.0-1
microsoftpatch availablevia msrc
Product: azl3 ig 0.29.0-1 on Azure Linux 3.0Fixed in: 0.29.0-1
microsoftpatch availablevia msrc
Product: cbl2 containerized-data-importer 1.55.0-23 on CBL Mariner 2.0Fixed in: 1.55.0-19
microsoftpatch availablevia msrc
Product: cbl2 containerized-data-importer 1.55.0-19 on CBL Mariner 2.0Fixed in: 1.55.0-19
microsoftpatch availablevia msrc
Product: cbl2 skopeo 1.14.2-10 on CBL Mariner 2.0Fixed in: 1.14.2-4
microsoftpatch availablevia msrc
Product: cbl2 skopeo 1.14.2-4 on CBL Mariner 2.0Fixed in: 1.14.2-4
microsoftpatch availablevia msrc
Product: cbl2 cri-o 1.22.3-14 on CBL Mariner 2.0Fixed in: 1.22.3-3
microsoftpatch availablevia msrc
Product: cbl2 cri-o 1.22.3-3 on CBL Mariner 2.0Fixed in: 1.22.3-3
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.14.2-4
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.22.3-4
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.55.0-19
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.14.2-4
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 20210626-7
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 20210626-7
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.22.3-4
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.55.0-19
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 1.14.4-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 0.29.0-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 1.57.0-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 1.14.4-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 20240213-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 20240213-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 0.29.0-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 1.57.0-2
microsoftpatch availablevia msrc
Product: 19888-17084Fixed in: 1.14.4-1
microsoftpatch availablevia msrc
Product: 17727-17084Fixed in: 1.14.4-1
microsoftpatch availablevia msrc
Product: 19930-17084Fixed in: 0.29.0-1
microsoftpatch availablevia msrc
Product: 17726-17084Fixed in: 0.29.0-1
microsoftpatch availablevia msrc
Product: 19821-17086Fixed in: 1.55.0-19
microsoftpatch availablevia msrc
Product: 17323-16823Fixed in: 1.55.0-19
microsoftpatch availablevia msrc
Product: 19858-17086Fixed in: 1.14.2-4
microsoftpatch availablevia msrc
Product: 17322-16823Fixed in: 1.14.2-4
microsoftpatch availablevia msrc
Product: 19777-17086Fixed in: 1.22.3-3
microsoftpatch availablevia msrc
Product: azl3 containerized-data-importer 1.57.0-14 on Azure Linux 3.0Fixed in: 1.57.0-2
microsoftpatch availablevia msrc
Product: 17320-16823Fixed in: 1.22.3-3
microsoftpatch availablevia msrc
Product: 17728-17084Fixed in: 1.57.0-2
microsoftpatch availablevia msrc
Product: 19346-17084Fixed in: 1.57.0-2
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-docker-builder:v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-hypershift-rhel9:v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-insights-rhel9-operator:v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-machine-api-rhel9-operator:v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-multus-admission-controller-rhel9:v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-multus-whereabouts-ipam-cni-rhel8:v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-nutanix-machine-controllers-rhel9:v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-openshift-controller-manager-rhel9:v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-operator-registry-rhel9:v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-ovn-kubernetes-microshift-rhel9:v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-ovn-kubernetes-rhel9:v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-powervs-cloud-controller-manager-rhel9:v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-powervs-machine-controllers-rhel9:v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-sdn-rhel9:v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-tests:v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-tools-rhel8:v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: rhcos-415.92.202409162258-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: podman-3:4.4.1-30.rhaos4.15.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: skopeo-2:1.11.3-4.rhaos4.15.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-agent-installer-node-agent-rhel9:v4.15.0-202410230304.p0.g366295f.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-agent-installer-orchestrator-rhel8:v4.15.0-202410230304.p0.gfde2b2e.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-operator-lifecycle-manager-rhel9:v4.15.0-202407230407.p0.gf3f8de5.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: podman-4:4.9.4-5.1.rhaos4.16.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: skopeo-2:1.14.4-1.rhaos4.16.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: cri-o-0:1.29.5-7.rhaos4.16.git7db4ada.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: openshift4/ose-operator-lifecycle-manager-rhel9:v4.16.0-202407171536.p0.g1551101.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: openshift4/ose-machine-config-rhel9-operator:v4.16.0-202409162206.p0.g6a425ab.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: openshift4/ose-agent-installer-orchestrator-rhel9:v4.16.0-202409231504.p0.g342902b.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.16Fixed in: openshift4/ose-agent-installer-node-agent-rhel9:v4.16.0-202410172201.p0.gb121e87.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.17Fixed in: openshift4/ose-machine-config-rhel9-operator:v4.17.0-202409122005.p0.gb170ad0.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.17Fixed in: openshift4/ose-olm-operator-controller-rhel9:v4.17.0-202409100034.p0.g8d16b39.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.17Fixed in: openshift4/ose-operator-lifecycle-manager-rhel9:v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.17Fixed in: openshift4/ose-operator-registry-rhel9:v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.17Fixed in: openshift4/ose-agent-installer-orchestrator-rhel9:v4.17.0-202410022234.p0.gfbc55c6.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: openshift4/oc-mirror-plugin-rhel9:v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: openshift4/ose-agent-installer-api-server-rhel9:v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: openshift4/ose-agent-installer-node-agent-rhel9:v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: openshift4/ose-agent-installer-orchestrator-rhel9:v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: openshift4/ose-machine-config-rhel9-operator:v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.18Fixed in: openshift4/ose-openshift-apiserver-rhel9:v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: RHEL-9-CNV-4.15Fixed in: container-native-virtualization/virt-cdi-controller-rhel9:v4.15.5-7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-operator-lifecycle-manager-rhel9:v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: OADP-1.3-RHEL-9Fixed in: oadp/oadp-velero-plugin-rhel9:1.3.4-9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-central-db-rhel8:4.4.5-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-collector-rhel8:4.4.5-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-collector-slim-rhel8:4.4.5-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-main-rhel8:4.4.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-operator-bundle:4.4.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-rhel8-operator:4.4.5-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-roxctl-rhel8:4.4.5-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-scanner-db-rhel8:4.4.5-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-scanner-db-slim-rhel8:4.4.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-scanner-rhel8:4.4.5-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-scanner-slim-rhel8:4.4.5-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-scanner-v4-db-rhel8:4.4.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.4Fixed in: advanced-cluster-security/rhacs-scanner-v4-rhel8:4.4.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-central-db-rhel8:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-collector-rhel8:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-collector-slim-rhel8:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-main-rhel8:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-operator-bundle:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-rhel8-operator:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-roxctl-rhel8:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-db-rhel8:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-db-slim-rhel8:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-rhel8:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-slim-rhel8:4.5.2-1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-v4-db-rhel8:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-v4-rhel8:4.5.2-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: container-tools:rhel8-8100020240808093819.afee755d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: buildah-2:1.37.2-1.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: skopeo-2:1.16.1-1.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: podman-2:5.2.2-1.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.8Fixed in: rhmtc/openshift-migration-controller-rhel8:v1.8.4-22
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.13Fixed in: podman-3:4.4.1-13.rhaos4.13.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.13Fixed in: skopeo-2:1.11.3-3.rhaos4.13.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-operator-lifecycle-manager:v4.14.0-202407260439.p0.g8d9b39e.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: podman-3:4.4.1-19.rhaos4.14.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: skopeo-2:1.11.3-3.rhaos4.14.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/network-tools-rhel8:v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-agent-installer-api-server-rhel8:v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-agent-installer-node-agent-rhel9:v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-alibaba-machine-controllers-rhel9:v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-apiserver-network-proxy-rhel9:v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-cluster-autoscaler-rhel9-operator:v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-cluster-control-plane-machine-set-rhel9-operator:v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-cluster-ingress-rhel9-operator:v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-cluster-network-rhel9-operator:v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-cluster-node-tuning-rhel9-operator:v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-console:v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8
View patch
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform Assisted Installer 1Fixed in: rhai-tech-preview/assisted-installer-agent-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-agent-installer-csr-approver-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-importer-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-olm-rukpak-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-installer
redhatno patchvia redhat_api
Product: OpenShift Source-to-Image (S2I)Fixed in: source-to-image-container
redhatno patchvia redhat_api
Product: Red Hat Openshift Sandboxed ContainersFixed in: openshift-sandboxed-containers/osc-rhel9-operator
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-cli-artifacts
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: ocp-tools-4/jenkins-rhel8
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: ocp-tools-4/jenkins-agent-base-rhel8
redhatno patchvia redhat_api
Product: Red Hat Openshift Sandboxed ContainersFixed in: openshift-sandboxed-containers/osc-must-gather-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/udi-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform Assisted Installer 1Fixed in: rhai-tech-preview/assisted-installer-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform Assisted Installer 1Fixed in: rhai-tech-preview/assisted-installer-reporter-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-deployer
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-cli
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: osbuild-composer
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: osbuild-composer
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: container-tools:4.0/podman
redhatend of lifevia redhat_api
Product: Red Hat OpenStack Platform 16.2Fixed in: osp-director-provisioner-container
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 3Fixed in: advanced-cluster-security/rhacs-scanner-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 3Fixed in: advanced-cluster-security/rhacs-scanner-db-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 3Fixed in: advanced-cluster-security/rhacs-roxctl-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 3Fixed in: advanced-cluster-security/rhacs-rhel8-operator
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 3Fixed in: advanced-cluster-security/rhacs-main-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 3Fixed in: advanced-cluster-security/rhacs-central-db-rhel8
redhatend of lifevia redhat_api
Product: OpenShift ServerlessFixed in: openshift-serverless-clients
redhatend of lifevia redhat_api
Product: OpenShift ServerlessFixed in: openshift-serverless-1/client-kn-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 3Fixed in: advanced-cluster-security/rhacs-scanner-slim-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-uploadserver-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-uploadserver
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-uploadproxy-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-uploadproxy
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-operator-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-operator
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-importer
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-controller
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-cloner-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-cloner
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-apiserver-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-cdi-apiserver
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift-clients

Vendor Advisories (4)

microsoft2024-Dec/CVE-2024-3727

CVE-2024-3727

Dec 10, 2024
goGHSA-6wvf-f2vw-3425high

github.com/containers/image allows unexpected authenticated registry accesses

May 14, 2024
microsoft2024-May/CVE-2024-3727Important

Containers/image: digest type does not guarantee valid type

May 14, 2024
redhatCVE-2024-3727Moderate

containers/image: digest type does not guarantee valid type

May 9, 2024

References

lists.fedoraproject.org / archives/list/[email protected]/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD
lists.fedoraproject.org / archives/list/[email protected]/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP
lists.fedoraproject.org / archives/list/[email protected]/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR
lists.fedoraproject.org / archives/list/[email protected]/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT
lists.fedoraproject.org / archives/list/[email protected]/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC
lists.fedoraproject.org / archives/list/[email protected]/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV
lists.fedoraproject.org / archives/list/[email protected]/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ
lists.fedoraproject.org / archives/list/[email protected]/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ
lists.fedoraproject.org / archives/list/[email protected]/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN
access.redhat.com / errata/RHSA-2024:0045
access.redhat.com / errata/RHSA-2024:3718
access.redhat.com / errata/RHSA-2024:4159
access.redhat.com / errata/RHSA-2024:4613
access.redhat.com / errata/RHSA-2024:4850
access.redhat.com / errata/RHSA-2024:4960
access.redhat.com / errata/RHSA-2024:5258
access.redhat.com / errata/RHSA-2024:5951
access.redhat.com / errata/RHSA-2024:6054
access.redhat.com / errata/RHSA-2024:6122
access.redhat.com / errata/RHSA-2024:6708
access.redhat.com / errata/RHSA-2024:6818
access.redhat.com / errata/RHSA-2024:6824
access.redhat.com / errata/RHSA-2024:7164
access.redhat.com / errata/RHSA-2024:7174
access.redhat.com / errata/RHSA-2024:7182
access.redhat.com / errata/RHSA-2024:7187
access.redhat.com / errata/RHSA-2024:7922
access.redhat.com / errata/RHSA-2024:7941
access.redhat.com / errata/RHSA-2024:8260
access.redhat.com / errata/RHSA-2024:8425
access.redhat.com / errata/RHSA-2024:9097
access.redhat.com / errata/RHSA-2024:9098
access.redhat.com / errata/RHSA-2024:9102
access.redhat.com / errata/RHSA-2024:9960
access.redhat.com / security/cve/CVE-2024-3727
bugzilla.redhat.com / show_bug.cgi