Lucene search
GoogleOSV:SUSE-SU-2024:2548-1HistoryJul 17, 2024 - 9:36 p.m.
Security update for podman
2024-07-1721:36:00
Google
osv.dev
1
podman
security update
cve-2024-3727
containers/image
bsc#1224122
software
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
17.8%
This update for podman fixes the following issues:
- CVE-2024-3727: Fixed digest type does not guarantee valid type in containers/image (bsc#1224122)
Related
redhatcve
redhatcve
CVE-2024-3727
2024-05-09 14:55:55
cve
cve
CVE-2024-3727
2024-05-14 15:42:07
alpinelinux
alpinelinux
CVE-2024-3727
2024-05-14 15:42:07
fedora
fedora
[SECURITY] Fedora 40 Update: podman-5.0.3-1.fc40
2024-05-17 01:09:09
[SECURITY] Fedora 39 Update: prometheus-podman-exporter-1.12.0-1.fc39
2024-06-11 01:59:07
[SECURITY] Fedora 40 Update: buildah-1.35.4-1.fc40
2024-05-26 01:27:01
nessus
nessus
Fedora 40 : podman (2024-20393c122f)
2024-05-17 00:00:00
Fedora 40 : prometheus-podman-exporter (2024-2f8a62d6d6)
2024-06-11 00:00:00
Fedora 39 : apptainer (2024-f4a65623e7)
2024-06-06 00:00:00
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-20393c122f)
2024-05-27 00:00:00
Fedora: Security Advisory (FEDORA-2024-1bae1999ba)
2024-06-11 00:00:00
Fedora: Security Advisory (FEDORA-2024-e383f723a9)
2024-06-11 00:00:00
vulnrichment
vulnrichment
CVE-2024-3727 Containers/image: digest type does not guarantee valid type
2024-05-09 14:57:21
cbl_mariner
cbl_mariner
CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.57.0-2
2024-07-02 23:30:04
CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.55.0-19
2024-07-10 19:52:59
CVE-2024-3727 affecting package cri-o for versions less than 1.22.3-4
2024-07-10 19:52:59
osv
osv
CGA-cfhf-3852-vxfv
2024-06-06 12:25:36
CGA-9gmw-qjvx-mv2r
2024-06-06 12:25:46
wolfi
wolfi
CVE-2024-3727 vulnerabilities
2024-09-27 09:13:12
redos
redos
ROS-20240711-02
2024-07-11 00:00:00
ROS-20240729-16
2024-07-29 00:00:00
ROS-20240719-01
2024-07-19 00:00:00
debiancve
debiancve
CVE-2024-3727
2024-05-14 15:42:07
ubuntucve
ubuntucve
CVE-2024-3727
2024-05-14 00:00:00
github
github
nvd
nvd
CVE-2024-3727
2024-05-14 15:42:07
veracode
veracode
Improper Digest Validation
2024-05-15 08:41:06
cvelist
cvelist
CVE-2024-3727 Containers/image: digest type does not guarantee valid type
2024-05-09 14:57:21
redhat
redhat
(RHSA-2024:4159) Important: OpenShift Container Platform 4.16.1 packages and security update
2024-07-03 11:34:42
(RHSA-2024:4850) Moderate: OpenShift Container Platform 4.15.24 bug fix and security update
2024-07-31 00:25:37
(RHSA-2024:6708) Moderate: ACS 4.5 enhancement and security update
2024-09-16 18:25:39
rocky
rocky
container-tools:rhel8 security update
2024-08-21 14:52:31
almalinux
almalinux
Important: container-tools:rhel8 security update
2024-08-13 00:00:00
oraclelinux
oraclelinux
container-tools:ol8 security update
2024-08-13 00:00:00
ibm
ibm
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
17.8%
Related for OSV:SUSE-SU-2024:2548-1