RHSA-2024%3A9960 — Vulnetix

RHSA-2024%3A9960 PUBLISHED CVSS 8.300000190734863 HIGH

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Risk Scores

CVSS 3.1

8.300000190734863

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

…and 68 more

Timeline

Nov 19, 2024 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 30, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2024:9960 advisory
https://access.redhat.com/security/updates/classification/#important advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2274767 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2295310 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2310527 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2310528 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2310529 issue
https://issues.redhat.com/browse/OADP-2944 advisory
https://issues.redhat.com/browse/OADP-3010 advisory
https://issues.redhat.com/browse/OADP-3050 advisory
https://issues.redhat.com/browse/OADP-3052 advisory
https://issues.redhat.com/browse/OADP-3562 advisory
https://issues.redhat.com/browse/OADP-3630 advisory
https://issues.redhat.com/browse/OADP-4736 advisory
https://issues.redhat.com/browse/OADP-4803 advisory
https://issues.redhat.com/browse/OADP-5111 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9960.json advisory
https://access.redhat.com/security/cve/CVE-2024-3727 advisory
https://www.cve.org/CVERecord?id=CVE-2024-3727 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-3727 advisory

…and 25 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x as a component of 9Base-OADP-1.3	oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x
Red Hat	oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le as a component of 9Base-OADP-1.3	*
Red Hat	oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64 as a component of 9Base-OADP-1.3	oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64
Red Hat	oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le as a component of 9Base-OADP-1.3	oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le
Red Hat	oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64 as a component of 9Base-OADP-1.3	oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64
Red Hat	oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le as a component of 9Base-OADP-1.3	*
Red Hat	oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64 as a component of 9Base-OADP-1.3	*
Red Hat	oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64 as a component of 9Base-OADP-1.3	oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64
Red Hat	oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x as a component of 9Base-OADP-1.3	oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x
Red Hat	oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64 as a component of 9Base-OADP-1.3	oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64
Red Hat	oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64 as a component of 9Base-OADP-1.3	oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64
Red Hat	oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64 as a component of 9Base-OADP-1.3	oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64
Red Hat	oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64 as a component of 9Base-OADP-1.3	oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64
Red Hat	oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le as a component of 9Base-OADP-1.3	oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le
Red Hat	oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x as a component of 9Base-OADP-1.3	*
Red Hat	oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le as a component of 9Base-OADP-1.3	oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le
Red Hat	oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64 as a component of 9Base-OADP-1.3	oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64
Red Hat	oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x as a component of 9Base-OADP-1.3	*
Red Hat	oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64 as a component of 9Base-OADP-1.3	oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64
Red Hat	oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64 as a component of 9Base-OADP-1.3	oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64