CVE-2024-0793
HighAdvisory
Published 17 Nov 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.7
- base score, highest
- EPSS
- 0.006
- 47th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 168
- of 17,781 indexed, latest versions
- Container images
- 146
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Kubernetes Nil pointer dereference in KCM after v1 HPA patch request
Carried by container images the latest versions of 168 of 17,781 indexed charts deploy, on 146 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+80 more | 1.27.0-alpha.1 | 146 |
- OSV records
- GHSA-h7wq-jj8r-qm7p
- Also known as
- GO-2024-3277
Charts affected
168 by stars
Container images carrying it
146 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 16fda01ae58a | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | e37d61b5277c | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | bbef381294ed | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | 274a179fd402 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | c7adcc4db378 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | 94c9a3e799c2 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | e72aa733faf2 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | 0f7d277bb2b2 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | a7fce69e171c | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | b5ade0d9cc6b | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | 313edfec2fca | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | 087618d16b83 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | 5e409a6332b4 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | 0b2a41c2a43e | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | b5d7681d1b9d | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | 4d337e14c80b | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | b61c750ade19 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | 9f157fe035f1 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| ghcr.io/ | 9d01bf9c9224 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| mcr.microsoft.com/ | ec1803037ed9 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| public.ecr.aws/ | e7e1db003e6a | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | 5b6701d8fb31 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | acaf37352569 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | 14b482c1f1b8 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | a5dc9d91de0d | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | fe2e2e5a2751 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | d7d93debf1f4 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | cc79b9e2a1c8 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | ec6ab507c5da | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | ebba936046ab | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | 04dada9e4503 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | 35f9c3ad644a | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | defc3263e0e9 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| quay.io/ | 6ba82beff18e | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | 81a13703d6b8 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | e3dccb1a21d1 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | f6902791fb9a | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | 66ce7d460e53 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | 3c5268158974 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | 8ccae74fc039 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | e0b2d217d1d2 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | 0684e23172d9 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | 46cf7475c8da | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | 9330c53feca7 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | 92257881c1d6 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| registry.k8s.io/ | 3ce0fdba4d8e | k8s.io/ | 1.27.0-alpha.1 | 1 |