Lucene search

K
redosRedosROS-20240719-01
HistoryJul 19, 2024 - 12:00 a.m.

ROS-20240719-01

2024-07-1900:00:00
redos.red-soft.ru
4
vulnerability
github containers
authenticated access
registry
resource depletion
remote attack
local path traversal
unix

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

8

Confidence

High

EPSS

0

Percentile

13.7%

A vulnerability in the github.com/containers/image library is related to the fact that an attacker can initiate
unexpected authenticated registry accesses on behalf of a victim user. Exploitation of the vulnerability
could allow an attacker acting remotely to cause resource depletion, local path traversal, and
other attacks.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64podman< 4.9.5-1UNKNOWN

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

8

Confidence

High

EPSS

0

Percentile

13.7%