CVE-2024-3727

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 8.3EPSS 1%

Published 2024-05-09Updated 2025-04-27

Vulnerability details

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CNAredhat

EPSS score history

Sources

3 links

PoC links are not available for guest users. Login to view them.

Bleeping Computer RedHat Vuln DB CVE Organization

Profile

CVSS

8.3

EPSS

Published

2024-05-09

Updated

2025-04-27

CNA

redhat

Vendors

Red Hat

30 products

CPEs

cpe:/a:redhat:openshift_api_data_protection:1.3::el9

cpe:/a:redhat:advanced_cluster_security:4.4::el8

cpe:/a:redhat:advanced_cluster_security:4.5::el8

cpe:/a:redhat:enterprise_linux:8::appstream

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/a:redhat:rhmt:1.8::el8

cpe:/a:redhat:openshift_ironic:4.13::el9

cpe:/a:redhat:openshift:4.13::el9

cpe:/a:redhat:openshift:4.13::el8

cpe:/a:redhat:openshift:4.14::el8

cpe:/a:redhat:openshift:4.14::el9

cpe:/a:redhat:openshift_ironic:4.14::el9

cpe:/a:redhat:openshift:4.15::el9

cpe:/a:redhat:openshift:4.15::el8

cpe:/a:redhat:openshift_ironic:4.15::el9

cpe:/a:redhat:openshift_ironic:4.16::el9

cpe:/a:redhat:openshift:4.16::el8

cpe:/a:redhat:openshift:4.16::el9

cpe:/a:redhat:openshift:4.17::el9

cpe:/a:redhat:openshift:4.18::el9

cpe:/a:redhat:container_native_virtualization:4.15::el9

cpe:/a:redhat:multicluster_engine

cpe:/a:redhat:ocp_tools

cpe:/a:redhat:serverless:1

cpe:/a:redhat:source_to_image:1

cpe:/a:redhat:acm:2

cpe:/a:redhat:advanced_cluster_security:3

cpe:/a:redhat:ansible_automation_platform

cpe:/a:redhat:ansible_automation_platform:2

cpe:/o:redhat:enterprise_linux:10

cpe:/o:redhat:enterprise_linux:7

cpe:/o:redhat:enterprise_linux:8

cpe:/o:redhat:enterprise_linux:9

cpe:/a:redhat:openshift:3.11

cpe:/a:redhat:openshift:4

cpe:/a:redhat:assisted_installer:1

cpe:/a:redhat:openshift_devspaces:3

cpe:/a:redhat:openshift_sandboxed_containers:1

cpe:/a:redhat:container_native_virtualization:4

cpe:/a:redhat:openstack:16.2

cpe:/a:redhat:quay:3

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated