CVE-2024-0793
HighAdvisory
Published 17 Nov 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.7
- base score, highest
- EPSS
- 0.006
- 47th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 168
- of 17,781 indexed, latest versions
- Container images
- 146
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Kubernetes Nil pointer dereference in KCM after v1 HPA patch request
Carried by container images the latest versions of 168 of 17,781 indexed charts deploy, on 146 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+80 more | 1.27.0-alpha.1 | 146 |
- OSV records
- GHSA-h7wq-jj8r-qm7p
- Also known as
- GO-2024-3277
Charts affected
168 by stars
Container images carrying it
146 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| clastix/ | 22918a06c253 | k8s.io/ | 1.27.0-alpha.1 | 6 |
| quay.io/ | 2ad610626658 | k8s.io/ | 1.27.0-alpha.1 | 6 |
| quay.io/ | e6df72478956 | k8s.io/ | 1.27.0-alpha.1 | 5 |
| argoproj/ | 830e86cacefd | k8s.io/ | 1.27.0-alpha.1 | 3 |
| groundnuty/ | c14d7271e401 | k8s.io/ | 1.27.0-alpha.1 | 3 |
| quay.io/ | 6545dac92173 | k8s.io/ | 1.27.0-alpha.1 | 3 |
| quay.io/ | 2b6db27eaf3d | k8s.io/ | 1.27.0-alpha.1 | 3 |
| quay.io/ | bc4aa22272ef | k8s.io/ | 1.27.0-alpha.1 | 3 |
| quay.io/ | 4c3b91bebd3d | k8s.io/ | 1.27.0-alpha.1 | 3 |
| quay.io/ | eec0305b594c | k8s.io/ | 1.27.0-alpha.1 | 3 |
| quay.io/ | 1b33357b3595 | k8s.io/ | 1.27.0-alpha.1 | 3 |
| registry.k8s.io/ | 99b37df34bc4 | k8s.io/ | 1.27.0-alpha.1 | 3 |
| bitnamilegacy/ | a0a972324d93 | k8s.io/ | 1.27.0-alpha.1 | 2 |
| csiplugin/ | 0766163dc046 | k8s.io/ | 1.27.0-alpha.1 | 2 |
| iomesh/ | f13deacac3f4 | k8s.io/ | 1.27.0-alpha.1 | 2 |
| k0sproject/ | f04635825d51 | k8s.io/ | 1.27.0-alpha.1 | 2 |
| lachlanevenson/ | af5cea3f2e40 | k8s.io/ | 1.27.0-alpha.1 | 2 |
| ghcr.io/ | 82d0b161161d | k8s.io/ | 1.27.0-alpha.1 | 2 |
| ghcr.io/ | c137478627cc | k8s.io/ | 1.27.0-alpha.1 | 2 |
| public.ecr.aws/ | 1564359e1e0e | k8s.io/ | 1.27.0-alpha.1 | 2 |
| quay.io/ | f7f8228f17cc | k8s.io/ | 1.27.0-alpha.1 | 2 |
| quay.io/ | 00406ccb1fa0 | k8s.io/ | 1.27.0-alpha.1 | 2 |
| quay.io/ | 382fca2054c9 | k8s.io/ | 1.27.0-alpha.1 | 2 |
| registry.k8s.io/ | 99e1ed9fbc8a | k8s.io/ | 1.27.0-alpha.1 | 2 |
| registry.k8s.io/ | 40adecbe3a40 | k8s.io/ | 1.27.0-alpha.1 | 2 |
| registry.k8s.io/ | 74a5cf9cfa9f | k8s.io/ | 1.27.0-alpha.1 | 2 |
| registry.k8s.io/ | 63d5e04551ec | k8s.io/ | 1.27.0-alpha.1 | 2 |
| airbyte/ | 98d2c39d512e | k8s.io/ | 1.27.0-alpha.1 | 1 |
| alpine/ | 6dbe6f391eda | k8s.io/ | 1.27.0-alpha.1 | 1 |
| alpine/ | 7a319b15cfc9 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| alpine/ | 7e1e7d5b7a96 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| alpine/ | 9c4976d47656 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| alpine/ | bd01dae02676 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| alpine/ | cd560fce90f7 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| alpine/ | e5c0b053fed7 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| alpine/ | eec354133193 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| amazon/ | b55277652ea8 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| apecloud/ | c93655ccb2d7 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| bitnamilegacy/ | 1249fc292e84 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| bitnamilegacy/ | 64614ef8290f | k8s.io/ | 1.27.0-alpha.1 | 1 |
| bitnamilegacy/ | 744f84cf7493 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| breton/ | 41b1bb483aa2 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| burganbank/ | 9259c34e4037 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| crowdfox/ | 6fa7e8063d27 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| csiplugin/ | 1fa83d45417f | k8s.io/ | 1.27.0-alpha.1 | 1 |
| datadog/ | 8f20e56b5311 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| dongjiang1989/ | dc5bd483874c | k8s.io/ | 1.27.0-alpha.1 | 1 |
| dongjiang1989/ | 923085c65123 | k8s.io/ | 1.27.0-alpha.1 | 1 |
| dongjiang1989/ | f0055c05dbee | k8s.io/ | 1.27.0-alpha.1 | 1 |
| dserio83/ | 6b3d9115fee2 | k8s.io/ | 1.27.0-alpha.1 | 1 |