VDB

RHSA-2024%3A5951

RHSA-2024%3A5951 PUBLISHED CVSS 8.300000190734863 HIGH

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Risk Scores

CVSS 3.1
8.300000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/kubevirt-realtime-checkup-rhel9@sha256:5fbe1d4e053f5a569604d9d3eb660bd586a9137c233d9986b5027c7fd5c5393b_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/kubevirt-realtime-checkup-rhel9@sha256:5fbe1d4e053f5a569604d9d3eb660bd586a9137c233d9986b5027c7fd5c5393b_arm64
Red Hatcontainer-native-virtualization/virt-artifacts-server-rhel9@sha256:836bd25b9bea006e884d71ec0b67f78660320e071308fc6fe99e9347367cbba5_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-artifacts-server-rhel9@sha256:836bd25b9bea006e884d71ec0b67f78660320e071308fc6fe99e9347367cbba5_arm64
Red Hatcontainer-native-virtualization/vm-network-latency-checkup-rhel9@sha256:7aea8fab750378fcbeac3377333a1ab6b57de014bf6791e088c8e8a6a33733ad_amd64 as a component of CNV 4.15 for RHEL 9*
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9@sha256:1696a21b9ac9ac5b181222f50a1e50382ea3654df98c5242eff156bfbc7707dc_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9@sha256:1696a21b9ac9ac5b181222f50a1e50382ea3654df98c5242eff156bfbc7707dc_amd64
Red Hatcontainer-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:90b08535c22527423c4fffdd32d0c80f909420d726ac40781e5e7b387320c5e3_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:90b08535c22527423c4fffdd32d0c80f909420d726ac40781e5e7b387320c5e3_amd64
Red Hatcontainer-native-virtualization/mtq-lock-server-rhel9@sha256:2f15434f24ea3875fa014c927ba775d00850d95a430e2e7cfe53344eefe53389_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/mtq-lock-server-rhel9@sha256:2f15434f24ea3875fa014c927ba775d00850d95a430e2e7cfe53344eefe53389_amd64
Red Hatcontainer-native-virtualization/virt-operator-rhel9@sha256:f7dea8a5f0928e691ff88a2b4857f85f589c5d4e02063c902e160726cf584a16_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-operator-rhel9@sha256:f7dea8a5f0928e691ff88a2b4857f85f589c5d4e02063c902e160726cf584a16_amd64
Red Hatcontainer-native-virtualization/cnv-must-gather-rhel9@sha256:f9e3f7096a874cc1086da3da8f69f799bb1aa401dae608e248d8e2af7654e4dd_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/cnv-must-gather-rhel9@sha256:f9e3f7096a874cc1086da3da8f69f799bb1aa401dae608e248d8e2af7654e4dd_amd64
Red Hatcontainer-native-virtualization/aaq-server-rhel9@sha256:8fbc415c770572995cd802c4e08455ea6852d47b92c893438664529119e4c9bf_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/aaq-server-rhel9@sha256:8fbc415c770572995cd802c4e08455ea6852d47b92c893438664529119e4c9bf_amd64
Red Hatcontainer-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:d2eca554006b26085db67b070688266363e3f9c0b1c00500dcb70f8659062dfa_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-cdi-uploadproxy-rhel9@sha256:d2eca554006b26085db67b070688266363e3f9c0b1c00500dcb70f8659062dfa_amd64
Red Hatcontainer-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:b225caa085288ee4c45f5d293ee97b8745bce0aecf7a84134d8491296e6b383a_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:b225caa085288ee4c45f5d293ee97b8745bce0aecf7a84134d8491296e6b383a_arm64
Red Hatcontainer-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:f3e255095989592e96a8c142abb54d06556e48a9af7c5737c50c1c8b8670cb0b_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:f3e255095989592e96a8c142abb54d06556e48a9af7c5737c50c1c8b8670cb0b_arm64
Red Hatcontainer-native-virtualization/vm-console-proxy-rhel9@sha256:d1b6271719e024c23a83b6a0c49cfa57b283ccf45cf04086995e44579c022e98_amd64 as a component of CNV 4.15 for RHEL 9*
Red Hatcontainer-native-virtualization/kubesecondarydns-rhel9@sha256:fbda827a925cfd38e3c96c1ca8b89b904e0e47fee90f8152fc55dddc5d0a8cdb_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/kubesecondarydns-rhel9@sha256:fbda827a925cfd38e3c96c1ca8b89b904e0e47fee90f8152fc55dddc5d0a8cdb_amd64
Red Hatcontainer-native-virtualization/cnv-must-gather-rhel9@sha256:6a619546331a13f81077f7e416a591eaae461167ae30857056fd48afdbcefcc3_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/cnv-must-gather-rhel9@sha256:6a619546331a13f81077f7e416a591eaae461167ae30857056fd48afdbcefcc3_arm64
Red Hatcontainer-native-virtualization/kubevirt-common-instancetypes-rhel9@sha256:a66936fa2f6a8f06b0083648eb718990990c76534aa75ba417f05425406bf807_arm64 as a component of CNV 4.15 for RHEL 9*
Red Hatcontainer-native-virtualization/virt-handler-rhel9@sha256:f920a42d20bf7add6653af022720b3405998b8da006dfb35d533c05aecc77fbe_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-handler-rhel9@sha256:f920a42d20bf7add6653af022720b3405998b8da006dfb35d533c05aecc77fbe_arm64
Red Hatcontainer-native-virtualization/hostpath-provisioner-rhel9@sha256:981199581e77a499c6b3a5e830214511c1de69fc371285f5ba42fbca5d3d06f2_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/hostpath-provisioner-rhel9@sha256:981199581e77a499c6b3a5e830214511c1de69fc371285f5ba42fbca5d3d06f2_amd64
Red Hatcontainer-native-virtualization/virt-cdi-operator-rhel9@sha256:712f4fb2a11fa48673dc46bcd56bf46a9a91d1a57c4d61f9b8820a0e19a0c504_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-cdi-operator-rhel9@sha256:712f4fb2a11fa48673dc46bcd56bf46a9a91d1a57c4d61f9b8820a0e19a0c504_amd64
Red Hatcontainer-native-virtualization/kubevirt-storage-checkup-rhel9@sha256:2da093dc387c7f58a2f22141412c9719b3528918cc0ce8210777b1eb9f393b02_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/kubevirt-storage-checkup-rhel9@sha256:2da093dc387c7f58a2f22141412c9719b3528918cc0ce8210777b1eb9f393b02_arm64

…and 80 more

Timeline

  • Aug 28, 2024 CVE Published
  • Apr 25, 2026 CVE Updated
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›