GPU VulnDB

Database/Container, Kubernetes & orchestration

cosign / sigstore: Remote image with a malicious attachment DoSes the machine running cosign

CVE-2024-29902Container, Kubernetes & orchestrationcurated

Impact

Remote image with a malicious attachment DoSes the machine running cosign

Who can reach it

Malicious image

What to do

Upgrade cosign to 2.2.4+

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.