VDB
RHSA-2024%3A8260
RHSA-2024%3A8260
PUBLISHED
CVSS 8.300000190734863 HIGH
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
Risk Scores
CVSS 3.1
8.300000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-gcp-pd-csi-driver-operator-rhel9@sha256:99314496e22a45327d44bfdbd4bb8b5ae4dc280b758dd2d1cee6480c7d5da2fc_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-gcp-pd-csi-driver-operator-rhel9@sha256:99314496e22a45327d44bfdbd4bb8b5ae4dc280b758dd2d1cee6480c7d5da2fc_ppc64le |
| Red Hat | openshift4/ose-openshift-apiserver-rhel9@sha256:6e6b6a8be559ed2b8c0f8c5ed6e54d56e144471a3300e64cb7eb2e53ea485728_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-openshift-apiserver-rhel9@sha256:6e6b6a8be559ed2b8c0f8c5ed6e54d56e144471a3300e64cb7eb2e53ea485728_ppc64le, * |
| Red Hat | openshift4/ose-aws-cluster-api-controllers-rhel9@sha256:85c3c47284c393902d47c718018fa9d96b6d52c5079e27eb6aad873e9e49494b_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-aws-cluster-api-controllers-rhel9@sha256:85c3c47284c393902d47c718018fa9d96b6d52c5079e27eb6aad873e9e49494b_arm64, openshift4/ose-aws-cluster-api-controllers-rhel9@sha256:85c3c47284c393902d47c718018fa9d96b6d52c5079e27eb6aad873e9e49494b_arm64 |
| Red Hat | openshift4/ose-kube-rbac-proxy-rhel9@sha256:973425c77532043d17a768ff20de36f7ec86f50b1d50d510ea0c981b0a33dfd6_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-kube-rbac-proxy-rhel9@sha256:973425c77532043d17a768ff20de36f7ec86f50b1d50d510ea0c981b0a33dfd6_arm64 |
| Red Hat | openshift4/ose-operator-marketplace-rhel9@sha256:f46cd315bb504f94bca3c4f91918b578e8b787fffbaa72b9169e8225318ebc4a_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-operator-marketplace-rhel9@sha256:f46cd315bb504f94bca3c4f91918b578e8b787fffbaa72b9169e8225318ebc4a_s390x, * |
| Red Hat | openshift4/ose-openshift-apiserver-rhel9@sha256:3aa150f7c093d3a3ccc04712257c18f5c6a3a2346a8566c3c49edb9f90db4c53_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-openshift-apiserver-rhel9@sha256:3aa150f7c093d3a3ccc04712257c18f5c6a3a2346a8566c3c49edb9f90db4c53_amd64, openshift4/ose-openshift-apiserver-rhel9@sha256:3aa150f7c093d3a3ccc04712257c18f5c6a3a2346a8566c3c49edb9f90db4c53_amd64 |
| Red Hat | openshift4/ose-baremetal-installer-rhel9@sha256:c1fbe724c46fcce7ee15cb949806a398a2965de5c997f584332341092a7f7c3b_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-baremetal-installer-rhel9@sha256:c1fbe724c46fcce7ee15cb949806a398a2965de5c997f584332341092a7f7c3b_arm64, openshift4/ose-baremetal-installer-rhel9@sha256:c1fbe724c46fcce7ee15cb949806a398a2965de5c997f584332341092a7f7c3b_arm64 |
| Red Hat | openshift4/ose-aws-ebs-csi-driver-rhel9-operator@sha256:9d3c629d68ad44f572e0e1a31d631045c8ee8836f913f5b0b2c23bb1fd2a298f_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | openshift4/ose-hypershift-rhel9@sha256:1c8ec930abdb11d05f82a3cd06c8eed2b4cb022fb676eca52e1532cb3ce4dc1a_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | openshift4/ose-azure-cloud-node-manager-rhel9@sha256:eca5326ce3bb150479d44bb65d558efdf6033735ff10fc485432eb925a74464b_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-azure-cloud-node-manager-rhel9@sha256:eca5326ce3bb150479d44bb65d558efdf6033735ff10fc485432eb925a74464b_arm64, openshift4/ose-azure-cloud-node-manager-rhel9@sha256:eca5326ce3bb150479d44bb65d558efdf6033735ff10fc485432eb925a74464b_arm64 |
| Red Hat | openshift4/ose-cluster-autoscaler-rhel9-operator@sha256:87bb914ad98cbec4a6f7bc728561e19daee326e2105cefd5e71106b707c46ad0_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-cluster-autoscaler-rhel9-operator@sha256:87bb914ad98cbec4a6f7bc728561e19daee326e2105cefd5e71106b707c46ad0_s390x, * |
| Red Hat | openshift4/ose-cluster-samples-rhel9-operator@sha256:9fd3a2e0333530cd9127f042996501920e0fa4ef553185e33b86abec6beb4d69_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | openshift4/ose-csi-driver-manila-rhel9@sha256:872b56fd8d821a2a8e677f2db9f0ff2eb394713a08f50f3e0f25397eed3a80f4_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-csi-driver-manila-rhel9@sha256:872b56fd8d821a2a8e677f2db9f0ff2eb394713a08f50f3e0f25397eed3a80f4_ppc64le, openshift4/ose-csi-driver-manila-rhel9@sha256:872b56fd8d821a2a8e677f2db9f0ff2eb394713a08f50f3e0f25397eed3a80f4_ppc64le |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-rhel9-operator@sha256:30176c6f862331e30306ef41467c62ac0d5da002bc90ab48c430ffca1641b6f0_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-ibm-vpc-block-csi-driver-rhel9-operator@sha256:30176c6f862331e30306ef41467c62ac0d5da002bc90ab48c430ffca1641b6f0_s390x, * |
| Red Hat | openshift4/ose-baremetal-installer-rhel9@sha256:c1fbe724c46fcce7ee15cb949806a398a2965de5c997f584332341092a7f7c3b_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-baremetal-installer-rhel9@sha256:c1fbe724c46fcce7ee15cb949806a398a2965de5c997f584332341092a7f7c3b_arm64, * |
| Red Hat | openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:fdba7edad1d4c9c06f662390b1056ef85b5bc37c34bde8265fdd62226dab760c_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:fdba7edad1d4c9c06f662390b1056ef85b5bc37c34bde8265fdd62226dab760c_ppc64le, openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:fdba7edad1d4c9c06f662390b1056ef85b5bc37c34bde8265fdd62226dab760c_ppc64le |
| Red Hat | openshift4/ovirt-csi-driver-rhel9-operator@sha256:e5bc2eb89423e9c43dc65ad61a5f20806774cb4bcdac27291ff3c6e7f6cd6d83_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ovirt-csi-driver-rhel9-operator@sha256:e5bc2eb89423e9c43dc65ad61a5f20806774cb4bcdac27291ff3c6e7f6cd6d83_arm64, openshift4/ovirt-csi-driver-rhel9-operator@sha256:e5bc2eb89423e9c43dc65ad61a5f20806774cb4bcdac27291ff3c6e7f6cd6d83_arm64 |
| Red Hat | openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:dcb9d7edb577e9cee0efd6db16f5a30f7697aa270c77d26d4df442c1e98f706e_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:dcb9d7edb577e9cee0efd6db16f5a30f7697aa270c77d26d4df442c1e98f706e_s390x, * |
| Red Hat | openshift4/ose-azure-cloud-node-manager-rhel9@sha256:e50f98b24a6cd5d6d281ab96a81f7527d3d56ac8e0637214df378d68b2d02173_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:9183f2eb4f841488c7a053666ecaf1a4dac7930d9765f95aac9a230497ba2723_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:9183f2eb4f841488c7a053666ecaf1a4dac7930d9765f95aac9a230497ba2723_ppc64le, openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:9183f2eb4f841488c7a053666ecaf1a4dac7930d9765f95aac9a230497ba2723_ppc64le |
…and 1280 more
Timeline
- Oct 24, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8260 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268854 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2274767 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2295310 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2310527 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2310528 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2310529 issue
- https://issues.redhat.com/browse/OCPBUGS-33692 advisory
- https://issues.redhat.com/browse/OCPBUGS-33693 advisory
- https://issues.redhat.com/browse/OCPBUGS-39415 advisory
- https://issues.redhat.com/browse/OCPBUGS-41364 advisory
- https://issues.redhat.com/browse/OCPBUGS-41805 advisory
- https://issues.redhat.com/browse/OCPBUGS-41904 advisory
- https://issues.redhat.com/browse/OCPBUGS-42014 advisory
- https://issues.redhat.com/browse/OCPBUGS-42369 advisory
- https://issues.redhat.com/browse/OCPBUGS-42420 advisory
- https://issues.redhat.com/browse/OCPBUGS-42432 advisory
- https://issues.redhat.com/browse/OCPBUGS-42724 advisory
- https://issues.redhat.com/browse/OCPBUGS-42933 advisory
…and 40 more