CVE-2021-24032
MediumAdvisory
Published 20 Feb 2021In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.7
- base score, highest
- EPSS
- 0.003
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 370
- of 17,781 indexed, latest versions
- Container images
- 222
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
libzstd - security update
Carried by container images the latest versions of 370 of 17,781 indexed charts deploy, on 222 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libzstddeb | 1.3.1+dfsg-1~ubuntu0.16.04.1, 1.3.3+dfsg-2ubuntu1, 1.3.3+dfsg-2ubuntu1.1, 1.3.8+dfsg-3+2 more | 1.3.1+dfsg-1~ubuntu0.16.04.1+esm3, 1.3.3+dfsg-2ubuntu1.2, 1.3.8+dfsg-3+deb10u2, 1.4.4+dfsg-3ubuntu0.1 | 214 |
| zstdapk | 1.4.5-r0, 1.4.5-r3 | 1.4.9-r0 | 8 |
- OSV records
- ALPINE-CVE-2021-24032UBUNTU-CVE-2021-24032DSA-4859-1
- Also known as
- USN-4760-1, USN-5720-1
Charts affected
370 by stars
Container images carrying it
222 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| weblate/ | 82848df56ecd | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| wekanteam/ | 68a51f0327df | libzstd | 1.4.4+dfsg-3ubuntu0.1 | 1 |
| wener/ | 9a42bae466d4 | zstd | 1.4.9-r0 | 1 |
| wiremind/ | 4dea42c8166c | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| woojoong/ | ec230db19652 | libzstd | 1.3.3+dfsg-2ubuntu1.2 | 1 |
| xingse/ | 9f9d5492e4bf | libzstd | 1.3.1+dfsg-1~ubuntu0.16.04.1+esm3 | 1 |
| yandex/ | ab1738a64b70 | libzstd | 1.3.3+dfsg-2ubuntu1.2 | 1 |
| yandex/ | ccf9c2b5e3f2 | libzstd | 1.3.3+dfsg-2ubuntu1.2 | 1 |
| yandex/ | d210dc69321e | libzstd | 1.3.3+dfsg-2ubuntu1.2 | 1 |
| gcr.io/ | 809338a69bd5 | libzstd | 1.3.3+dfsg-2ubuntu1.2 | 1 |
| gcr.io/ | cf3c3af0187e | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| ghcr.io/ | d8a0334cddfc | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| ghcr.io/ | d6e901ad0ebd | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| ghcr.io/ | 821fd6a6f2cd | zstd | 1.4.9-r0 | 1 |
| ghcr.io/ | 88423e422ea8 | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| ghcr.io/ | 1702fc9df79f | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| mcr.microsoft.com/ | ec1803037ed9 | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| public.ecr.aws/ | 442cc3b32935 | zstd | 1.4.9-r0 | 1 |
| quay.io/ | 5ac114e567ed | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| quay.io/ | a8b21cec412c | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| quay.io/ | 9a8d95ca0bd9 | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |
| registry.gitlab.com/ | f21f19346b29 | libzstd | 1.3.8+dfsg-3+deb10u2 | 1 |