Lucene search
+L

51 matches found

OSV
OSV
added 2024/05/14 6:30 p.m.24 views

GHSA-6WVF-F2VW-3425 github.com/containers/image allows unexpected authenticated registry accesses

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

8.3CVSS8.1AI score0.01279EPSS
SaveExploits0References43
NVD
NVD
added 2024/05/14 3:42 p.m.28 views

CVE-2024-3727

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

8.3CVSS7.8AI score0.01279EPSS
SaveExploits0References36
OSV
OSV
added 2024/05/14 3:42 p.m.11 views

AZL-42315 CVE-2024-3727 affecting package libcontainers-common for versions less than 20240213-2

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

8.3CVSS6.6AI score0.01279EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/14 3:42 p.m.11 views

AZL-42330 CVE-2024-3727 affecting package ig for versions less than 0.29.0-1

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

8.3CVSS6.6AI score0.01279EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/09 2:57 p.m.455 views

CVE-2024-3727

CVE-2024-3727 affects the containers/image library and enables attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, leading to resource exhaustion and local path traversal. Multiple connected advisories (e.g., container-tools updates and package-specific pat...

8.3CVSS5.8AI score0.01279EPSS
SaveExploits0References36
Debian CVE
Debian CVE
added 2024/05/09 2:57 p.m.35 views

CVE-2024-3727

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

8.3CVSS6AI score0.01279EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2024/05/09 2:57 p.m.27 views

CVE-2024-3727

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

8.3CVSS7.9AI score0.01279EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/05/09 2:57 p.m.47 views

CVE-2024-3727 Containers/image: digest type does not guarantee valid type

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

8.3CVSS8AI score0.01279EPSS
SaveExploits0References27
OSV
OSV
added 2024/05/09 2:57 p.m.23 views

CVE-2024-3727 Containers/image: digest type does not guarantee valid type

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

8.3CVSS6.6AI score
SaveExploits0References41
CNNVD
CNNVD
added 2024/05/09 12:00 a.m.8 views

image 安全漏洞

image is a set of Go libraries designed to handle container images and container image registries in various ways. A security vulnerability exists in image, which stems from a flaw found in the image library. An attacker exploiting this vulnerability could perform resource exhaustion, local path...

8.3CVSS6.3AI score0.01279EPSS
SaveExploits0References14
OSV
OSV
added 2022/08/05 4:15 p.m.7 views

CVE-2022-33715

Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local attacker to access files of One UI...

5.5CVSS5.8AI score0.00102EPSS
SaveExploits0References1
Rows per page
Query Builder