VDB
BDU%3A2024-05780
BDU%3A2024-05780
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость библиотеки github.com/containers/image, связанная с неправильной проверкой значения целостности, позволяющая нарушителю вызвать отказ в обслуживании, выполнить атаку обхода локального пути или оказать иное воздействие
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ООО «Ред Софт», Fedora Project, АО «ИВК», Red Hat Inc. | РЕД ОС (запись в едином реестре российских программ №3751), Fedora, АЛЬТ СП 10, OpenShift Container Platform, Red Hat Migration Toolkit for Containers |
Timeline
- Jul 29, 2024 CVE Published
- Apr 23, 2025 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
References
- https://access.redhat.com/errata/RHSA-2024:0045 url
- https://access.redhat.com/errata/RHSA-2024:4159 url
- https://access.redhat.com/errata/RHSA-2024:4613 url
- https://access.redhat.com/security/cve/CVE-2024-3727 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2274767 url
- https://github.com/containers/image/commit/132678b47bae29c710589012668cb85859d88385 url
- https://github.com/containers/image/releases/tag/v5.29.3 url
- https://github.com/containers/image/releases/tag/v5.30.1 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN url
- https://nvd.nist.gov/vuln/detail/CVE-2024-3727 url
- https://redos.red-soft.ru/support/secure/ url
- https://altsp.su/obnovleniya-bezopasnosti/ url
…and 10 more