CVE-2024-3727

HIGH Year: 2024
CVSS v3 Score
8.3
High
Weakness Type
CWE-354
View all →

Vulnerability Description

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Related Vulnerabilities

CVE-2018-21070

HIGH
CVSS:8.4(High)

An issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845 chipsets) software. An attacker can bypass Secure Boot and obtain root access because of a missing Boot...

CWE-3542018

CVE-2017-3224

HIGH
CVSS:8.2(High)

Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two in...

CWE-3542017

CVE-2020-26896

HIGH
CVSS:8.2(High)

Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-c...

CWE-3542020

CVE-2017-3760

HIGH
CVSS:8.1(High)

The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-...

CWE-3542017

CVE-2019-13496

HIGH
CVSS:8.1(High)

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a succ...

CWE-3542019

CVE-2022-36174

HIGH
CVSS:8.1(High)

FreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux Agent < 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled updat...

CWE-3542022