CVE-2024-3727
High · 8.3CVSS
8.3
EPSS
1.3%
Published
May 14, 2024
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A problem in common container image handling software can let attackers make the software reach out to registries or files using a victim's login, which may waste resources or expose private data.
- Exploitation
- Requires User Interaction
- Attacker needs
- User Interaction
- Complexity
- High
- Impact
- Data Exposure
- Component
- Library
- Class
- SSRF
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
The flaw in the github.com/containers/image library enables server-side request forgery that forces authenticated registry requests on behalf of a victim, permitting resource exhaustion via repeated pulls, local path traversal through crafted image references, and potential follow-on attacks that abuse the victim's credentials.
Why it matters to the business
Organizations using container tooling may experience unexpected registry costs, service degradation from resource exhaustion, or exposure of internal resources and files, increasing operational overhead and risk of data leakage or compliance issues, especially given the stable but non-zero exploit probability.
How an attack unfolds
An attacker crafts a malicious image reference or manifest that, when processed by a victim using the vulnerable library, causes the victim's authenticated session to contact attacker-controlled or internal registries, triggering SSRF-style requests that can exhaust resources or traverse paths without direct attacker authentication.
How to fix it
Upgrade the github.com/containers/image library to a version that enforces stricter validation of registry references and prevents SSRF vectors; monitor upstream releases for the corrected package and rebuild dependent container tooling with the fixed dependency.
How to confirm the fix worked
Review dependency manifests and go.mod files for the containers/image version, run integration tests that attempt malicious image references to confirm requests are no longer forwarded unexpectedly, and verify that registry access logs no longer show anomalous authenticated calls from the affected code paths.
Typical attack path
- Identify a target application or user that relies on the containers/image library for registry operations
- Supply a crafted image reference or configuration that embeds an unexpected registry endpoint or path traversal payload
- Trigger processing of the reference through normal container pull, build, or import workflows
- Abuse the resulting authenticated requests to exhaust registry quotas, access internal resources, or perform path traversal
- Chain results into further attacks such as denial of service or unauthorized data access
How to detect it
Examine application and container runtime logs for repeated or unexpected registry authentication events originating from image pull operations, unusual path patterns in image references, and spikes in resource usage tied to registry interactions; correlate with source code paths that use the containers/image library.
What your security team should do
- Prioritize inventory of all builds and tools that import github.com/containers/image and schedule upgrades
- Implement network egress controls and registry allow-lists to limit SSRF impact until patches are applied
- Add runtime monitoring for unusual registry request volumes or unexpected endpoints in container workflows
- Review and restrict user-supplied image references in any internal tooling to reduce the attack surface
The record
A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/containers/image | 0 | 5.30.1 |
| Go | github.com/containers/image/v5 | 0 | 5.29.3 |
| Go | github.com/containers/image/v5 | 0 | 5.30.1 |
| Go | github.com/containers/image/v5 | 5.30.0 | 5.30.1 |
| AlmaLinux:8 | aardvark-dns | 0 | 2:1.10.0-1.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | aardvark-dns | 0 | 2:1.10.0-1.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | aardvark-dns | 0 | 2:1.10.0-1.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | buildah | 0 | 2:1.33.8-4.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | buildah-tests | 0 | 2:1.33.8-4.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | cockpit-podman | 0 | 84.1-1.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | conmon | 0 | 3:2.1.10-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | conmon | 0 | 3:2.1.10-1.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | conmon | 0 | 3:2.1.10-1.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | container-selinux | 0 | 2:2.229.0-2.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | containernetworking-plugins | 0 | 1:1.4.0-5.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | containers-common | 0 | 2:1-82.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | crit | 0 | 3.18-5.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | crit | 0 | 3.18-5.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | criu | 0 | 3.18-5.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | criu | 0 | 3.18-5.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | criu-devel | 0 | 3.18-5.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | criu-devel | 0 | 3.18-5.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | criu-libs | 0 | 3.18-5.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | criu-libs | 0 | 3.18-5.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | crun | 0 | 1.14.3-2.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | crun | 0 | 1.14.3-2.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | fuse-overlayfs | 0 | 1.13-1.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | fuse-overlayfs | 0 | 1.13-1.module_el8.10.0+3859+6ae70a0e |
| AlmaLinux:8 | libslirp | 0 | 4.4.0-2.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | libslirp | 0 | 4.4.0-2.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | libslirp-devel | 0 | 4.4.0-2.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | libslirp-devel | 0 | 4.4.0-2.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | netavark | 0 | 2:1.10.3-1.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | netavark | 0 | 2:1.10.3-1.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 0 | 1.2.10-1.module_el8.10.0+3792+03eaed9c |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 0 | 1.2.10-1.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | podman | 0 | 4:4.9.4-12.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | podman-catatonit | 0 | 4:4.9.4-12.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | podman-docker | 0 | 4:4.9.4-12.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | podman-gvproxy | 0 | 4:4.9.4-12.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | podman-plugins | 0 | 4:4.9.4-12.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | podman-remote | 0 | 4:4.9.4-12.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | podman-tests | 0 | 4:4.9.4-12.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | python3-criu | 0 | 3.18-5.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | python3-podman | 0 | 4.9.0-2.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | runc | 0 | 1:1.1.12-4.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | skopeo | 0 | 2:1.14.5-3.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | skopeo-tests | 0 | 2:1.14.5-3.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | slirp4netns | 0 | 1.2.3-1.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | slirp4netns | 0 | 1.2.3-1.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | slirp4netns | 0 | 1.2.3-1.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | toolbox | 0 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | toolbox | 0 | 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | toolbox | 0 | 0.0.99.5-2.module_el8.10.0+3876+e55593a8 |
| AlmaLinux:8 | toolbox-tests | 0 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 |
| AlmaLinux:8 | toolbox-tests | 0 | 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:8 | udica | 0 | 0.2.6-21.module_el8.10.0+3858+6ad51f9f |
| AlmaLinux:9 | buildah | 0 | 2:1.37.2-1.el9 |
| AlmaLinux:9 | buildah-tests | 0 | 2:1.37.2-1.el9 |
| AlmaLinux:9 | skopeo | 0 | 2:1.16.1-1.el9 |
| AlmaLinux:9 | skopeo-tests | 0 | 2:1.16.1-1.el9 |
| Chainguard | buildah | 0 | 1.35.4-r0 |
| Chainguard | skopeo | 0 | 1.15.1-r0 |
| Chainguard | zot | 0 | 2.0.4-r2 |
| Debian:11 | golang-github-containers-image | 0 | No fix |
| Debian:12 | golang-github-containers-image | 0 | No fix |
| Debian:13 | golang-github-containers-image | 0 | 5.29.3-1 |
| Mageia:9 | buildah | 0 | 1.37.4-1.mga9 |
| Mageia:9 | podman | 0 | 4.9.5-1.mga9 |
| Mageia:9 | skopeo | 0 | 1.16.1-1.mga9 |
| Red Hat:enterprise_linux:8::appstream | aardvark-dns | 0 | 2:1.10.0-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | buildah | 0 | 2:1.33.8-4.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | buildah-debuginfo | 0 | 2:1.33.8-4.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | buildah-debugsource | 0 | 2:1.33.8-4.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | buildah-tests | 0 | 2:1.33.8-4.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | buildah-tests-debuginfo | 0 | 2:1.33.8-4.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | cockpit-podman | 0 | 0:84.1-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | conmon | 0 | 3:2.1.10-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | conmon-debuginfo | 0 | 3:2.1.10-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | conmon-debugsource | 0 | 3:2.1.10-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | container-selinux | 0 | 2:2.229.0-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins | 0 | 1:1.4.0-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debuginfo | 0 | 1:1.4.0-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debugsource | 0 | 1:1.4.0-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | containers-common | 0 | 2:1-82.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | crit | 0 | 0:3.18-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | criu | 0 | 0:3.18-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | criu-debuginfo | 0 | 0:3.18-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | criu-debugsource | 0 | 0:3.18-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | criu-devel | 0 | 0:3.18-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | criu-libs | 0 | 0:3.18-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | criu-libs-debuginfo | 0 | 0:3.18-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | crun | 0 | 0:1.14.3-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | crun-debuginfo | 0 | 0:1.14.3-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | crun-debugsource | 0 | 0:1.14.3-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | fuse-overlayfs | 0 | 0:1.13-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | fuse-overlayfs-debuginfo | 0 | 0:1.13-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | fuse-overlayfs-debugsource | 0 | 0:1.13-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | libslirp | 0 | 0:4.4.0-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | libslirp-debuginfo | 0 | 0:4.4.0-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | libslirp-debugsource | 0 | 0:4.4.0-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | libslirp-devel | 0 | 0:4.4.0-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | netavark | 0 | 2:1.10.3-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | oci-seccomp-bpf-hook | 0 | 0:1.2.10-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debuginfo | 0 | 0:1.2.10-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debugsource | 0 | 0:1.2.10-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-catatonit | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-catatonit-debuginfo | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-debuginfo | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-debugsource | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-docker | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-gvproxy | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-gvproxy-debuginfo | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-plugins | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-plugins-debuginfo | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-remote | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-remote-debuginfo | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | podman-tests | 0 | 4:4.9.4-12.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | python-podman | 0 | 0:4.9.0-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | python3-criu | 0 | 0:3.18-5.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | python3-podman | 0 | 0:4.9.0-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | runc | 0 | 1:1.1.12-4.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | runc-debuginfo | 0 | 1:1.1.12-4.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | runc-debugsource | 0 | 1:1.1.12-4.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | skopeo | 0 | 2:1.14.5-3.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | skopeo-tests | 0 | 2:1.14.5-3.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | slirp4netns | 0 | 0:1.2.3-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | slirp4netns-debuginfo | 0 | 0:1.2.3-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | slirp4netns-debugsource | 0 | 0:1.2.3-1.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | toolbox | 0 | 0:0.0.99.5-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | toolbox-debuginfo | 0 | 0:0.0.99.5-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | toolbox-debugsource | 0 | 0:0.0.99.5-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | toolbox-tests | 0 | 0:0.0.99.5-2.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:8::appstream | udica | 0 | 0:0.2.6-21.module+el8.10.0+22202+761b9a65 |
| Red Hat:enterprise_linux:9::appstream | buildah | 0 | 2:1.37.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | buildah-debuginfo | 0 | 2:1.37.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | buildah-debugsource | 0 | 2:1.37.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | buildah-tests | 0 | 2:1.37.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | buildah-tests-debuginfo | 0 | 2:1.37.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | podman | 0 | 2:5.2.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | podman-debuginfo | 0 | 2:5.2.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | podman-debugsource | 0 | 2:5.2.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | podman-docker | 0 | 2:5.2.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | podman-plugins | 0 | 2:5.2.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | podman-plugins-debuginfo | 0 | 2:5.2.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | podman-remote | 0 | 2:5.2.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | podman-remote-debuginfo | 0 | 2:5.2.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | podman-tests | 0 | 2:5.2.2-1.el9 |
| Red Hat:enterprise_linux:9::appstream | skopeo | 0 | 2:1.16.1-1.el9 |
| Red Hat:enterprise_linux:9::appstream | skopeo-debuginfo | 0 | 2:1.16.1-1.el9 |
| Red Hat:enterprise_linux:9::appstream | skopeo-debugsource | 0 | 2:1.16.1-1.el9 |
| Red Hat:enterprise_linux:9::appstream | skopeo-tests | 0 | 2:1.16.1-1.el9 |
| Red Hat:openshift:4.13::el8 | podman | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-catatonit | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-catatonit-debuginfo | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-debuginfo | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-debugsource | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-docker | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-gvproxy | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-gvproxy-debuginfo | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-plugins | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-plugins-debuginfo | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-remote | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-remote-debuginfo | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | podman-tests | 0 | 3:4.4.1-13.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | skopeo | 0 | 2:1.11.3-3.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el8 | skopeo-tests | 0 | 2:1.11.3-3.rhaos4.13.el8 |
| Red Hat:openshift:4.13::el9 | podman | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | podman-debuginfo | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | podman-debugsource | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | podman-docker | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | podman-gvproxy | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | podman-gvproxy-debuginfo | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | podman-plugins | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | podman-plugins-debuginfo | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | podman-remote | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | podman-remote-debuginfo | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | podman-tests | 0 | 3:4.4.1-14.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | skopeo | 0 | 2:1.11.3-3.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | skopeo-debuginfo | 0 | 2:1.11.3-3.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | skopeo-debugsource | 0 | 2:1.11.3-3.rhaos4.13.el9 |
| Red Hat:openshift:4.13::el9 | skopeo-tests | 0 | 2:1.11.3-3.rhaos4.13.el9 |
| Red Hat:openshift:4.14::el8 | podman | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-catatonit | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-catatonit-debuginfo | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-debuginfo | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-debugsource | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-docker | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-gvproxy | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-gvproxy-debuginfo | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-plugins | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-plugins-debuginfo | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-remote | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-remote-debuginfo | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | podman-tests | 0 | 3:4.4.1-19.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | skopeo | 0 | 2:1.11.3-3.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | skopeo-debuginfo | 0 | 2:1.11.3-3.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | skopeo-debugsource | 0 | 2:1.11.3-3.rhaos4.14.el8 |
| Red Hat:openshift:4.14::el8 | skopeo-tests | 0 | 2:1.11.3-3.rhaos4.14.el8 |
Related vulnerabilities
- CVE-2025-47913 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and… Also affects aardvark-dns
- CVE-2025-52565 container escape due to /dev/console mount and related races Also affects aardvark-dns
- CVE-2025-31133 runc container escape via "masked path" abuse due to mount race conditions Also affects aardvark-dns
- CVE-2025-52881 runc container escape and denial of service due to arbitrary write gadgets and procfs… Also affects aardvark-dns
- CVE-2025-22871 The net/http package improperly accepts a bare LF as a line terminator in chunked data… Also affects aardvark-dns
- CVE-2024-9341 A flaw was found in Go. Also affects aardvark-dns
- CVE-2024-34156 Calling Decoder.Decode on a message which contains deeply nested structures can cause a… Also affects aardvark-dns
- CVE-2024-34158 Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a… Also affects aardvark-dns