FlawAtlas
Search the atlas
CVE-2024-3727 High

Containers/image: digest type does not guarantee valid type

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Exploit probability 1.3%
Published May 9, 2024
Required by Not available
Last source change August 16, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

12 explicit affected versions

Go github.com/containers/image
Go github.com/containers/image/v5
Go github.com/containers/image/v5

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities GHSA-6wvf-f2vw-3425

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

View original source
Open Source Vulnerabilities GO-2024-2842

An attacker may trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

View original source
Open Source Vulnerabilities CVE-2024-3727

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

View original source

05 / REFERENCES

Further evidence