Public vulnerability disclosure

CVE-2024-3727

Containers/image: digest type does not guarantee valid type

publishedCWE-354

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Technical severity8.3 highCVSS 3.1 · CNA: redhat
Published2024-05-09Source updated 2026-11-05
Collected2026-11-052 attributed sources

Fixes and workarounds

No remediation reported in collected sources.

Missing remediation information is not evidence that no patch exists.

Affected products and versions

Affected products, source version ranges and reporting authorities
ProductVersionsAuthority


image
https://github.com/containers/image
≥ 0; < 5.29.3 (affected, semver)
≥ 5.30.0; < 5.30.1 (affected, semver)
Other versions: unaffected
CNA: redhat
OADP-1.3-RHEL-9
Red Hat
oadp/oadp-velero-plugin-rhel9
https://catalog.redhat.com/software/containers/
≥ 1.3.4-9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-central-db-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-collector-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-collector-slim-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-main-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-4; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-operator-bundle
https://catalog.redhat.com/software/containers/
≥ 4.4.5-3; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-rhel8-operator
https://catalog.redhat.com/software/containers/
≥ 4.4.5-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-roxctl-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-scanner-db-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-scanner-db-slim-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-3; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-scanner-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-scanner-slim-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-scanner-v4-db-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-3; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.4
Red Hat
advanced-cluster-security/rhacs-scanner-v4-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.4.5-3; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-central-db-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-collector-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-collector-slim-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-main-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-operator-bundle
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-rhel8-operator
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-roxctl-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-scanner-db-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-scanner-db-slim-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-scanner-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-scanner-slim-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-1; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-scanner-v4-db-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 4.5
Red Hat
advanced-cluster-security/rhacs-scanner-v4-rhel8
https://catalog.redhat.com/software/containers/
≥ 4.5.2-2; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Enterprise Linux 8
Red Hat
container-tools:rhel8
https://access.redhat.com/downloads/content/package-browser/
≥ 8100020240808093819.afee755d; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Enterprise Linux 9
Red Hat
buildah
https://access.redhat.com/downloads/content/package-browser/
≥ 2:1.37.2-1.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Enterprise Linux 9
Red Hat
skopeo
https://access.redhat.com/downloads/content/package-browser/
≥ 2:1.16.1-1.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Enterprise Linux 9
Red Hat
podman
https://access.redhat.com/downloads/content/package-browser/
≥ 2:5.2.2-1.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat Migration Toolkit for Containers 1.8
Red Hat
rhmtc/openshift-migration-controller-rhel8
https://catalog.redhat.com/software/containers/
≥ v1.8.4-22; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.13
Red Hat
podman
https://access.redhat.com/downloads/content/package-browser/
≥ 3:4.4.1-13.rhaos4.13.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.13
Red Hat
skopeo
https://access.redhat.com/downloads/content/package-browser/
≥ 2:1.11.3-3.rhaos4.13.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.14
Red Hat
openshift4/ose-operator-lifecycle-manager
https://catalog.redhat.com/software/containers/
≥ v4.14.0-202407260439.p0.g8d9b39e.assembly.stream.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.14
Red Hat
podman
https://access.redhat.com/downloads/content/package-browser/
≥ 3:4.4.1-19.rhaos4.14.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.14
Red Hat
skopeo
https://access.redhat.com/downloads/content/package-browser/
≥ 2:1.11.3-3.rhaos4.14.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/network-tools-rhel8
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-agent-installer-api-server-rhel8
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-agent-installer-node-agent-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-alibaba-machine-controllers-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-apiserver-network-proxy-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-cluster-autoscaler-rhel9-operator
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-cluster-control-plane-machine-set-rhel9-operator
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-cluster-ingress-rhel9-operator
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-cluster-network-rhel9-operator
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-cluster-node-tuning-rhel9-operator
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-console
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-docker-builder
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-hypershift-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-insights-rhel9-operator
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-machine-api-rhel9-operator
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-multus-admission-controller-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-multus-whereabouts-ipam-cni-rhel8
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-nutanix-machine-controllers-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-openshift-controller-manager-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-operator-lifecycle-manager-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-operator-registry-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-ovn-kubernetes-microshift-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-ovn-kubernetes-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-powervs-cloud-controller-manager-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-powervs-machine-controllers-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-sdn-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-tests
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-tools-rhel8
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift/ose-rhel-coreos-8
https://catalog.redhat.com/software/containers/
≥ 415.92.202409162258-0; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
rhcos
https://catalog.redhat.com/software/containers/
≥ 415.92.202409162258-0; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
podman
https://access.redhat.com/downloads/content/package-browser/
≥ 3:4.4.1-30.rhaos4.15.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
skopeo
https://access.redhat.com/downloads/content/package-browser/
≥ 2:1.11.3-4.rhaos4.15.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-agent-installer-node-agent-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202410230304.p0.g366295f.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-agent-installer-orchestrator-rhel8
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202410230304.p0.gfde2b2e.assembly.stream.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift4/ose-operator-lifecycle-manager-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.0-202407230407.p0.gf3f8de5.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.15
Red Hat
openshift/ose-rhel-coreos-9
https://catalog.redhat.com/software/containers/
≥ 415.92.202409162258-0; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.16
Red Hat
podman
https://access.redhat.com/downloads/content/package-browser/
≥ 4:4.9.4-5.1.rhaos4.16.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.16
Red Hat
skopeo
https://access.redhat.com/downloads/content/package-browser/
≥ 2:1.14.4-1.rhaos4.16.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.16
Red Hat
cri-o
https://access.redhat.com/downloads/content/package-browser/
≥ 0:1.29.5-7.rhaos4.16.git7db4ada.el8; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.16
Red Hat
openshift4/ose-operator-lifecycle-manager-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.16.0-202407171536.p0.g1551101.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.16
Red Hat
openshift4/ose-machine-config-rhel9-operator
https://catalog.redhat.com/software/containers/
≥ v4.16.0-202409162206.p0.g6a425ab.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.16
Red Hat
openshift4/ose-agent-installer-orchestrator-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.16.0-202409231504.p0.g342902b.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.16
Red Hat
openshift4/ose-agent-installer-node-agent-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.16.0-202410172201.p0.gb121e87.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.17
Red Hat
openshift4/ose-machine-config-rhel9-operator
https://catalog.redhat.com/software/containers/
≥ v4.17.0-202409122005.p0.gb170ad0.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.17
Red Hat
openshift4/ose-olm-operator-controller-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.17.0-202409100034.p0.g8d16b39.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.17
Red Hat
openshift4/ose-operator-lifecycle-manager-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.17
Red Hat
openshift4/ose-operator-registry-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.17
Red Hat
openshift4/ose-agent-installer-orchestrator-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.17.0-202410022234.p0.gfbc55c6.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.18
Red Hat
openshift4/oc-mirror-plugin-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.18
Red Hat
openshift4/ose-agent-installer-api-server-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.18
Red Hat
openshift4/ose-agent-installer-node-agent-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.18
Red Hat
openshift4/ose-agent-installer-orchestrator-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.18
Red Hat
openshift4/ose-machine-config-rhel9-operator
https://catalog.redhat.com/software/containers/
≥ v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4.18
Red Hat
openshift4/ose-openshift-apiserver-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
RHEL-9-CNV-4.15
Red Hat
container-native-virtualization/virt-cdi-controller-rhel9
https://catalog.redhat.com/software/containers/
≥ v4.15.5-7; < * (unaffected, rpm)
Other versions: affected
CNA: redhat
Multicluster Engine for Kubernetes
Red Hat
multicluster-engine/agent-service-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Multicluster Engine for Kubernetes
Red Hat
multicluster-engine/assisted-installer-agent-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Multicluster Engine for Kubernetes
Red Hat
multicluster-engine/assisted-installer-reporter-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Multicluster Engine for Kubernetes
Red Hat
multicluster-engine/assisted-installer-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Multicluster Engine for Kubernetes
Red Hat
multicluster-engine/hive-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
OpenShift Developer Tools and Services
Red Hat
ocp-tools-4/jenkins-agent-base-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
OpenShift Developer Tools and Services
Red Hat
ocp-tools-4/jenkins-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
OpenShift Serverless
Red Hat
openshift-serverless-1/client-kn-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
OpenShift Serverless
Red Hat
openshift-serverless-clients
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
OpenShift Source-to-Image (S2I)
Red Hat
source-to-image-container
https://catalog.redhat.com/software/containers/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Management for Kubernetes 2
Red Hat
rhacm2/submariner-rhel9-operator
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Advanced Cluster Security 3
Red Hat
advanced-cluster-security/rhacs-central-db-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 3
Red Hat
advanced-cluster-security/rhacs-main-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 3
Red Hat
advanced-cluster-security/rhacs-rhel8-operator
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 3
Red Hat
advanced-cluster-security/rhacs-roxctl-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 3
Red Hat
advanced-cluster-security/rhacs-scanner-db-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 3
Red Hat
advanced-cluster-security/rhacs-scanner-db-slim-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Advanced Cluster Security 3
Red Hat
advanced-cluster-security/rhacs-scanner-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Advanced Cluster Security 3
Red Hat
advanced-cluster-security/rhacs-scanner-slim-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Ansible Automation Platform 1.2
Red Hat
openshift-clients
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Ansible Automation Platform 2
Red Hat
openshift-clients
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 10
Red Hat
buildah
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 10
Red Hat
conmon
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 10
Red Hat
containers-common
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 10
Red Hat
osbuild-composer
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 10
Red Hat
podman
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 10
Red Hat
skopeo
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 7
Red Hat
buildah
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unknown
CNA: redhat
Red Hat Enterprise Linux 7
Red Hat
podman
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unknown
CNA: redhat
Red Hat Enterprise Linux 7
Red Hat
skopeo
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unknown
CNA: redhat
Red Hat Enterprise Linux 8
Red Hat
container-tools:4.0/buildah
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 8
Red Hat
container-tools:4.0/conmon
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 8
Red Hat
container-tools:4.0/containers-common
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 8
Red Hat
container-tools:4.0/podman
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Enterprise Linux 8
Red Hat
container-tools:4.0/skopeo
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 8
Red Hat
osbuild-composer
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Enterprise Linux 9
Red Hat
conmon
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 9
Red Hat
containers-common
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat Enterprise Linux 9
Red Hat
osbuild-composer
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 3.11
Red Hat
atomic-openshift
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unknown
CNA: redhat
Red Hat OpenShift Container Platform 3.11
Red Hat
podman
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unknown
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
buildah
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
conmon
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
containers-common
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift4/ose-agent-installer-csr-approver-rhel9
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift4/ose-baremetal-installer-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift4/ose-cli
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift4/ose-cli-artifacts
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift4/ose-deployer-rhel9
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift4/ose-installer
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift4/ose-installer-altinfra-rhel9
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift4/ose-installer-artifacts
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift4/ose-olm-rukpak-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift4/ose-openshift-proxy-pull-test-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
openshift-clients
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform 4
Red Hat
ose-installer-terraform-providers-container
https://catalog.redhat.com/software/containers/
Range not reported
Other versions: unaffected
CNA: redhat
Red Hat OpenShift Container Platform Assisted Installer 1
Red Hat
rhai-tech-preview/assisted-installer-agent-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform Assisted Installer 1
Red Hat
rhai-tech-preview/assisted-installer-reporter-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Container Platform Assisted Installer 1
Red Hat
rhai-tech-preview/assisted-installer-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Dev Spaces
Red Hat
devspaces/udi-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Openshift Sandboxed Containers
Red Hat
openshift-sandboxed-containers/osc-must-gather-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Openshift Sandboxed Containers
Red Hat
openshift-sandboxed-containers/osc-rhel8-operator
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-apiserver
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-apiserver-rhel9
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-cloner
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-cloner-rhel9
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-controller
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-importer
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-importer-rhel9
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-operator
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-operator-rhel9
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-uploadproxy
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-uploadproxy-rhel9
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-uploadserver
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenShift Virtualization 4
Red Hat
container-native-virtualization/virt-cdi-uploadserver-rhel9
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: affected
CNA: redhat
Red Hat OpenStack Platform 16.2
Red Hat
osp-director-provisioner-container
https://catalog.redhat.com/software/containers/
Range not reported
Other versions: affected
CNA: redhat
Red Hat Quay 3
Red Hat
quay/quay-builder-rhel8
https://access.redhat.com/downloads/content/package-browser/
Range not reported
Other versions: unaffected
CNA: redhat

Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.

CVSS assessments

CVSS scores, vectors and reporting authorities
Version / scoreVectorAuthority
3.1 / 8.3
high
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:HCNA: redhat

Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

References

For agents and automation

Read public disclosures for free as Markdown or JSON. Compatible browsers also expose native WebMCP tools to search disclosures, read this page, and discover API access.

Use the ontology-linked Cyber API with x402 pay per request, or a Y2 Pro or Elite API key with the intel:cyber scope.

Endpoints and access details

https://api.y2.dev/api/v2/cyber/cves
https://api.y2.dev/api/v2/cyber/cves/{cveId}

A workspace owner or admin can create a Pro or Elite API key. Send Authorization: Bearer <Y2_API_KEY> from your trusted agent runtime.

For x402, omit Authorization and read the HTTP 402 payment challenge before signing a retry. Public browser tools do not make payments.

Agent access JSON · OpenAPI · CVE API guide