VDB
RHSA-2024%3A6818
RHSA-2024%3A6818
PUBLISHED
CVSS 8.300000190734863 HIGH
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
Risk Scores
CVSS 3.1
8.300000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/network-tools-rhel8@sha256:9adf88240c48ec67ad538e487e626c9149d458c227f7c9812b8f8d3fff422e34_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/network-tools-rhel8@sha256:9adf88240c48ec67ad538e487e626c9149d458c227f7c9812b8f8d3fff422e34_s390x |
| Red Hat | openshift4/network-tools-rhel8@sha256:82bd4ae2a564ebc5c40b2b8f6f45826b432aa01acd463c07315d519654e7a6d8_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/network-tools-rhel8@sha256:82bd4ae2a564ebc5c40b2b8f6f45826b432aa01acd463c07315d519654e7a6d8_ppc64le |
| Red Hat | openshift4/ose-console@sha256:117671a4f44788575cbafe0173271c012f75ca060504b879a0e2b39199e46874_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-console@sha256:117671a4f44788575cbafe0173271c012f75ca060504b879a0e2b39199e46874_amd64 |
| Red Hat | openshift4/ose-operator-registry-rhel9@sha256:244c7ac927480d87aab8b51f716867360ee49f79b11516a9d7e45d1aa9547a88_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-operator-registry-rhel9@sha256:244c7ac927480d87aab8b51f716867360ee49f79b11516a9d7e45d1aa9547a88_amd64 |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:6f3d95627abfbdcf0b23fb826db5f5be06b747d912c7ef0eb3a024560bdea498_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-cluster-autoscaler-rhel9-operator@sha256:e1ed50ea4a4e671cb5a6302bf553ee11709ce262d6852271fd6f0b3e6bc21c15_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-autoscaler-rhel9-operator@sha256:e1ed50ea4a4e671cb5a6302bf553ee11709ce262d6852271fd6f0b3e6bc21c15_arm64 |
| Red Hat | openshift4/ose-cluster-control-plane-machine-set-rhel9-operator@sha256:04fb8a760dcf566ef00953923061e3c461a484fea546096676c4bbc471349a03_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-control-plane-machine-set-rhel9-operator@sha256:04fb8a760dcf566ef00953923061e3c461a484fea546096676c4bbc471349a03_amd64 |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6775929176fa2ccf716e2bf595e495b16800d786775966116f08311d022b3c68_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:6775929176fa2ccf716e2bf595e495b16800d786775966116f08311d022b3c68_arm64 |
| Red Hat | openshift4/ose-hypershift-rhel9@sha256:8e4cf123a274440a7ba122a4446c46951910c871b5850f5c8c40000d28cacdb3_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-hypershift-rhel9@sha256:8e4cf123a274440a7ba122a4446c46951910c871b5850f5c8c40000d28cacdb3_arm64 |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:edf0e74bfced49ac681fdb830ea89b9094c0735734e8c404fdf5c41712fac5bf_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:edf0e74bfced49ac681fdb830ea89b9094c0735734e8c404fdf5c41712fac5bf_s390x |
| Red Hat | openshift4/ose-multus-admission-controller-rhel9@sha256:1f3329db5d20a8690c4b737f9ee7ae4f0de84554eb5f0c1af07e21375b0c90ab_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-multus-admission-controller-rhel9@sha256:1f3329db5d20a8690c4b737f9ee7ae4f0de84554eb5f0c1af07e21375b0c90ab_ppc64le |
| Red Hat | openshift4/ose-tests@sha256:8af7eb1b9d87c579026aa664c672f9b09302b54cfada4f0aa6a80e8da622b4cc_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-tests@sha256:8af7eb1b9d87c579026aa664c672f9b09302b54cfada4f0aa6a80e8da622b4cc_arm64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:eeb3ff2a15445588092e252b3de3fb8004c596b5a5445b6639ffd39ad7eba037_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-tools-rhel8@sha256:eeb3ff2a15445588092e252b3de3fb8004c596b5a5445b6639ffd39ad7eba037_arm64 |
| Red Hat | openshift4/ose-cluster-network-rhel9-operator@sha256:fa69138e8b3e3127eba9529a837da5c826dd07f0b8c692f25bb6d81b310a76ab_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | rhcos@sha256:20fc302d24120293ee04aba9f17f88d4fe729e65e7761d947f10ca6b1203b2f1_aarch64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-insights-rhel9-operator@sha256:f7208167a40311ae0893ee872951de6d7771e931a1269c898b3c5b669d29d686_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-cluster-control-plane-machine-set-rhel9-operator@sha256:5ffe9a6b89efa5924c21d696c2c3f6e4ffacdbbd01876f4b775aef727cc76614_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-operator-registry-rhel9@sha256:a8ec27409e5526c2bb6865335daa871250cf40c22ad5ae6194d45cb896248194_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-operator-registry-rhel9@sha256:a8ec27409e5526c2bb6865335daa871250cf40c22ad5ae6194d45cb896248194_ppc64le |
| Red Hat | openshift4/ose-docker-builder@sha256:44e135e82177c91792db18d8fd9f74ed958871daab7117f8ca6e810d39d373d0_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-docker-builder@sha256:44e135e82177c91792db18d8fd9f74ed958871daab7117f8ca6e810d39d373d0_arm64 |
| Red Hat | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:a14ce7d4dc59bfdd1058e0d66aab63cab125b8a9c5e674cc9fc162f77b8fedac_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:a14ce7d4dc59bfdd1058e0d66aab63cab125b8a9c5e674cc9fc162f77b8fedac_arm64 |
…and 86 more
Timeline
- Sep 25, 2024 CVE Published
- Apr 25, 2026 CVE Updated
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:6818 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2302487 issue
- https://issues.redhat.com/browse/OCPBUGS-35869 advisory
- https://issues.redhat.com/browse/OCPBUGS-35922 advisory
- https://issues.redhat.com/browse/OCPBUGS-37464 advisory
- https://issues.redhat.com/browse/OCPBUGS-37727 advisory
- https://issues.redhat.com/browse/OCPBUGS-38065 advisory
- https://issues.redhat.com/browse/OCPBUGS-38108 advisory
- https://issues.redhat.com/browse/OCPBUGS-38593 advisory
- https://issues.redhat.com/browse/OCPBUGS-41340 advisory
- https://issues.redhat.com/browse/OCPBUGS-41598 advisory
- https://issues.redhat.com/browse/OCPBUGS-41635 advisory
- https://issues.redhat.com/browse/OCPBUGS-41701 advisory
- https://issues.redhat.com/browse/OCPBUGS-41809 advisory
- https://issues.redhat.com/browse/OCPBUGS-41819 advisory
- https://issues.redhat.com/browse/OCPBUGS-41946 advisory
- https://issues.redhat.com/browse/OCPBUGS-41947 advisory
- https://issues.redhat.com/browse/OCPBUGS-41981 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6818.json advisory
…and 7 more