# CVE-2024-3727: Containers/image: digest type does not guarantee valid type

Status: published. Published: 2024-05-09. Updated: 2026-11-05.

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

## Remediation

No remediation reported in collected sources

## Affected products and versions

-  /  (image): ≥ 0; < 5.29.3 (affected, semver); ≥ 5.30.0; < 5.30.1 (affected, semver). Source: CNA: redhat
- Red Hat / OADP-1.3-RHEL-9 (oadp/oadp-velero-plugin-rhel9): ≥ 1.3.4-9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-central-db-rhel8): ≥ 4.4.5-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-collector-rhel8): ≥ 4.4.5-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-collector-slim-rhel8): ≥ 4.4.5-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-main-rhel8): ≥ 4.4.5-4; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-operator-bundle): ≥ 4.4.5-3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-rhel8-operator): ≥ 4.4.5-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-roxctl-rhel8): ≥ 4.4.5-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-scanner-db-rhel8): ≥ 4.4.5-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-scanner-db-slim-rhel8): ≥ 4.4.5-3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-scanner-rhel8): ≥ 4.4.5-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-scanner-slim-rhel8): ≥ 4.4.5-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-scanner-v4-db-rhel8): ≥ 4.4.5-3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.4 (advanced-cluster-security/rhacs-scanner-v4-rhel8): ≥ 4.4.5-3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-central-db-rhel8): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-collector-rhel8): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-collector-slim-rhel8): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-main-rhel8): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-operator-bundle): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-rhel8-operator): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-roxctl-rhel8): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-scanner-db-rhel8): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-scanner-db-slim-rhel8): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-scanner-rhel8): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-scanner-slim-rhel8): ≥ 4.5.2-1; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-scanner-v4-db-rhel8): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 4.5 (advanced-cluster-security/rhacs-scanner-v4-rhel8): ≥ 4.5.2-2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (container-tools:rhel8): ≥ 8100020240808093819.afee755d; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (buildah): ≥ 2:1.37.2-1.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (skopeo): ≥ 2:1.16.1-1.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (podman): ≥ 2:5.2.2-1.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Migration Toolkit for Containers 1.8 (rhmtc/openshift-migration-controller-rhel8): ≥ v1.8.4-22; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.13 (podman): ≥ 3:4.4.1-13.rhaos4.13.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.13 (skopeo): ≥ 2:1.11.3-3.rhaos4.13.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.14 (openshift4/ose-operator-lifecycle-manager): ≥ v4.14.0-202407260439.p0.g8d9b39e.assembly.stream.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.14 (podman): ≥ 3:4.4.1-19.rhaos4.14.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.14 (skopeo): ≥ 2:1.11.3-3.rhaos4.14.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/network-tools-rhel8): ≥ v4.15.0-202409172305.p0.g17536c8.assembly.stream.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-agent-installer-api-server-rhel8): ≥ v4.15.0-202409171307.p0.ged4651a.assembly.stream.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-agent-installer-node-agent-rhel9): ≥ v4.15.0-202409161436.p0.g1f44c02.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-alibaba-machine-controllers-rhel9): ≥ v4.15.0-202409120135.p0.gf7f5eed.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-apiserver-network-proxy-rhel9): ≥ v4.15.0-202409131835.p0.gadccbd5.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-cluster-autoscaler-rhel9-operator): ≥ v4.15.0-202409120135.p0.g8425d88.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-cluster-control-plane-machine-set-rhel9-operator): ≥ v4.15.0-202409130735.p0.gc03231f.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-cluster-ingress-rhel9-operator): ≥ v4.15.0-202409131635.p0.gb73e37f.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-cluster-network-rhel9-operator): ≥ v4.15.0-202409161836.p0.g092d15b.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-cluster-node-tuning-rhel9-operator): ≥ v4.15.0-202409180105.p0.g1fdd5b0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-console): ≥ v4.15.0-202409180905.p0.gf6f61ca.assembly.stream.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-docker-builder): ≥ v4.15.0-202409171307.p0.g160e7ca.assembly.stream.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-hypershift-rhel9): ≥ v4.15.0-202409131635.p0.gb7c1d6a.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-insights-rhel9-operator): ≥ v4.15.0-202409111636.p0.gf0c44f6.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-machine-api-rhel9-operator): ≥ v4.15.0-202409120135.p0.g3ab953d.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-multus-admission-controller-rhel9): ≥ v4.15.0-202409111636.p0.g9ea52de.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-multus-whereabouts-ipam-cni-rhel8): ≥ v4.15.0-202409111636.p0.gd80fe46.assembly.stream.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-nutanix-machine-controllers-rhel9): ≥ v4.15.0-202409120135.p0.g8de6f94.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-openshift-controller-manager-rhel9): ≥ v4.15.0-202409171307.p0.g5d529dd.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-operator-lifecycle-manager-rhel9): ≥ v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-operator-registry-rhel9): ≥ v4.15.0-202409180305.p0.g1da79fe.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-ovn-kubernetes-microshift-rhel9): ≥ v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-ovn-kubernetes-rhel9): ≥ v4.15.0-202409172305.p0.g5af0be8.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-powervs-cloud-controller-manager-rhel9): ≥ v4.15.0-202409130536.p0.g1d6a7ed.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-powervs-machine-controllers-rhel9): ≥ v4.15.0-202409161436.p0.g4121cfc.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-sdn-rhel9): ≥ v4.15.0-202409120135.p0.g71a6f28.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-tests): ≥ v4.15.0-202409180705.p0.g95ee44e.assembly.stream.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-tools-rhel8): ≥ v4.15.0-202409161234.p0.g4e8d689.assembly.stream.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift/ose-rhel-coreos-8): ≥ 415.92.202409162258-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (rhcos): ≥ 415.92.202409162258-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (podman): ≥ 3:4.4.1-30.rhaos4.15.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (skopeo): ≥ 2:1.11.3-4.rhaos4.15.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-agent-installer-node-agent-rhel9): ≥ v4.15.0-202410230304.p0.g366295f.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-agent-installer-orchestrator-rhel8): ≥ v4.15.0-202410230304.p0.gfde2b2e.assembly.stream.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift4/ose-operator-lifecycle-manager-rhel9): ≥ v4.15.0-202407230407.p0.gf3f8de5.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.15 (openshift/ose-rhel-coreos-9): ≥ 415.92.202409162258-0; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.16 (podman): ≥ 4:4.9.4-5.1.rhaos4.16.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.16 (skopeo): ≥ 2:1.14.4-1.rhaos4.16.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.16 (cri-o): ≥ 0:1.29.5-7.rhaos4.16.git7db4ada.el8; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.16 (openshift4/ose-operator-lifecycle-manager-rhel9): ≥ v4.16.0-202407171536.p0.g1551101.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.16 (openshift4/ose-machine-config-rhel9-operator): ≥ v4.16.0-202409162206.p0.g6a425ab.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.16 (openshift4/ose-agent-installer-orchestrator-rhel9): ≥ v4.16.0-202409231504.p0.g342902b.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.16 (openshift4/ose-agent-installer-node-agent-rhel9): ≥ v4.16.0-202410172201.p0.gb121e87.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.17 (openshift4/ose-machine-config-rhel9-operator): ≥ v4.17.0-202409122005.p0.gb170ad0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.17 (openshift4/ose-olm-operator-controller-rhel9): ≥ v4.17.0-202409100034.p0.g8d16b39.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.17 (openshift4/ose-operator-lifecycle-manager-rhel9): ≥ v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.17 (openshift4/ose-operator-registry-rhel9): ≥ v4.17.0-202409101338.p0.gb0d86a0.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.17 (openshift4/ose-agent-installer-orchestrator-rhel9): ≥ v4.17.0-202410022234.p0.gfbc55c6.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/oc-mirror-plugin-rhel9): ≥ v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-agent-installer-api-server-rhel9): ≥ v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-agent-installer-node-agent-rhel9): ≥ v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-agent-installer-orchestrator-rhel9): ≥ v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-machine-config-rhel9-operator): ≥ v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4.18 (openshift4/ose-openshift-apiserver-rhel9): ≥ v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / RHEL-9-CNV-4.15 (container-native-virtualization/virt-cdi-controller-rhel9): ≥ v4.15.5-7; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Multicluster Engine for Kubernetes (multicluster-engine/agent-service-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Multicluster Engine for Kubernetes (multicluster-engine/assisted-installer-agent-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Multicluster Engine for Kubernetes (multicluster-engine/assisted-installer-reporter-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Multicluster Engine for Kubernetes (multicluster-engine/assisted-installer-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Multicluster Engine for Kubernetes (multicluster-engine/hive-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / OpenShift Developer Tools and Services (ocp-tools-4/jenkins-agent-base-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / OpenShift Developer Tools and Services (ocp-tools-4/jenkins-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / OpenShift Serverless (openshift-serverless-1/client-kn-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / OpenShift Serverless (openshift-serverless-clients): Version range not reported. Source: CNA: redhat
- Red Hat / OpenShift Source-to-Image (S2I) (source-to-image-container): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2 (rhacm2/submariner-rhel9-operator): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 3 (advanced-cluster-security/rhacs-central-db-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 3 (advanced-cluster-security/rhacs-main-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 3 (advanced-cluster-security/rhacs-rhel8-operator): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 3 (advanced-cluster-security/rhacs-roxctl-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 3 (advanced-cluster-security/rhacs-scanner-db-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 3 (advanced-cluster-security/rhacs-scanner-db-slim-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 3 (advanced-cluster-security/rhacs-scanner-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Advanced Cluster Security 3 (advanced-cluster-security/rhacs-scanner-slim-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Ansible Automation Platform 1.2 (openshift-clients): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Ansible Automation Platform 2 (openshift-clients): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (buildah): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (conmon): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (containers-common): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (osbuild-composer): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (podman): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (skopeo): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 7 (buildah): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 7 (podman): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 7 (skopeo): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (container-tools:4.0/buildah): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (container-tools:4.0/conmon): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (container-tools:4.0/containers-common): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (container-tools:4.0/podman): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (container-tools:4.0/skopeo): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (osbuild-composer): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (conmon): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (containers-common): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (osbuild-composer): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 3.11 (atomic-openshift): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 3.11 (podman): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (buildah): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (conmon): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (containers-common): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift4/ose-agent-installer-csr-approver-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift4/ose-baremetal-installer-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift4/ose-cli): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift4/ose-cli-artifacts): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift4/ose-deployer-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift4/ose-installer): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift4/ose-installer-altinfra-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift4/ose-installer-artifacts): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift4/ose-olm-rukpak-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift4/ose-openshift-proxy-pull-test-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift-clients): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (ose-installer-terraform-providers-container): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform Assisted Installer 1 (rhai-tech-preview/assisted-installer-agent-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform Assisted Installer 1 (rhai-tech-preview/assisted-installer-reporter-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform Assisted Installer 1 (rhai-tech-preview/assisted-installer-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Dev Spaces (devspaces/udi-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Openshift Sandboxed Containers (openshift-sandboxed-containers/osc-must-gather-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Openshift Sandboxed Containers (openshift-sandboxed-containers/osc-rhel8-operator): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-apiserver): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-apiserver-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-cloner): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-cloner-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-controller): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-importer): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-importer-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-operator): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-operator-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-uploadproxy): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-uploadproxy-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-uploadserver): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Virtualization 4 (container-native-virtualization/virt-cdi-uploadserver-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenStack Platform 16.2 (osp-director-provisioner-container): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Quay 3 (quay/quay-builder-rhel8): Version range not reported. Source: CNA: redhat

## Severity and prioritization

- CVSS 3.1: 8.3 (high); CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H; source: CNA: redhat

- CISA KEV: No listing in collected sources

- EPSS: 1.28% as of 2026-11-04; percentile 70.07%

- SSVC: exploitation none; automatable no; technical impact partial; source ADP: CISA-ADP

- Weaknesses: CWE-354

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://access.redhat.com/errata/RHSA-2024:0045 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:3718 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:4159 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:4613 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:4850 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:4960 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:5258 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:5951 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:6054 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:6122 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:6708 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:6818 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:6824 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:7164 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:7174 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:7182 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:7187 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:7922 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:7941 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:8260 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:8425 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:9097 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:9098 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:9102 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:9960 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/security/cve/CVE-2024-3727 (CNA: redhat; vdb-entry, x_refsource_REDHAT)

- https://bugzilla.redhat.com/show_bug.cgi?id=2274767 (CNA: redhat; issue-tracking, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2024:0045 (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- https://access.redhat.com/errata/RHSA-2024:4159 (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- https://access.redhat.com/errata/RHSA-2024:4613 (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- https://access.redhat.com/security/cve/CVE-2024-3727 (ADP: CVE; vdb-entry, x_refsource_REDHAT, x_transferred)

- https://bugzilla.redhat.com/show_bug.cgi?id=2274767 (ADP: CVE; issue-tracking, x_refsource_REDHAT, x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4HEYS34N55G7NOQZKNEXZKQVNDGEICCD/ (ADP: CVE; x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6B37TXOKTKDBE2V26X2NSP7JKNMZOFVP/ (ADP: CVE; x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYT3D2P3OJKISNFKOOHGY6HCUCQZYAVR/ (ADP: CVE; x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLND3YDQQRWVRIUPL2G5UKXP5L3VSBBT/ (ADP: CVE; x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DTOMYERG5ND4QFDHC4ZSGCED3T3ESRSC/ (ADP: CVE; x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FBZQ2ZRMFEUQ35235B2HWPSXGDCBZHFV/ (ADP: CVE; x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ/ (ADP: CVE; x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QFXMF3VVKIZN7ZMB7PKZCSWV6MOMTGMQ/ (ADP: CVE; x_transferred)

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN/ (ADP: CVE; x_transferred)

## Provenance

- CNA: redhat: https://www.cve.org/CVERecord?id=CVE-2024-3727; retrieved 2026-11-05; source updated 2026-11-05

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2024-3727; retrieved 2026-11-05; source updated Not reported

Revision: a53a3d6cda80408bb0a66e8fa0480424fbd9a45f4f601368d36e3a16764be98a

Canonical: https://y2.dev/cve/CVE-2024-3727

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.