Lucene search

K
redosRedosROS-20240711-02
HistoryJul 11, 2024 - 12:00 a.m.

ROS-20240711-02

2024-07-1100:00:00
redos.red-soft.ru
4
vulnerability
github.com/containers/image
unauthorized access
remote attacks
resource depletion
path traversal

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

13.7%

A vulnerability in the github.com/containers/image library is related to the fact that an attacker can initiate
unexpected authenticated registry accesses on behalf of a victim user. Exploitation of the vulnerability
could allow an attacker acting remotely to cause resource depletion, local path traversal, and
other attacks.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64buildah< 1.36.0-1UNKNOWN

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

6.4

Confidence

Low

EPSS

0

Percentile

13.7%