StackRadar

CVE-2024-10041

Medium

Advisory

Published 23 Oct 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,807
of 17,790 indexed, latest versions
Container images
1,905
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,807 of 17,790 indexed charts deploy, on 1,905 images.

Affected packageAffected versionsFixed inImages
pamdeb1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+32 moreno fix listed1,893
pamrpm1.3.0-lp151.7.38, 1.5.1-12.el9, 1.5.1-14.el9, 1.5.1-15.el9+3 more0:1.5.1-21.el9_5, 1.7.1-3.1, 1.7.1-160000.3.112
OSV records
DEBIAN-CVE-2024-10041RHSA-2024:11250UBUNTU-CVE-2024-10041openSUSE-SU-2025:15477-1SUSE-SU-2026:21192-1
Also known as
RHSA-2024:9941

Charts affected

1,807 by stars
ChartLatestAffected imagesRadar Score
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

11,603
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

7,697
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2024-10041.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
pam@1.5.2-6+deb12u1
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
pam@1.5.2-6+deb12u1
no fix listed
library/mongo:latest5211c51171f5
pam@1.5.3-5ubuntu5.6
no fix listed
murtazashah46/helmfile:latest4d11726cf803
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

13,783
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
pam@1.5.3-5ubuntu5
no fix listed

Open the chart page →

2,142
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,684
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-10041.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
pam@1.1.8-3.6ubuntu2.18.04.3
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
pam@1.3.1-5ubuntu4.3
no fix listed

Open the chart page →

9,256
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-10041.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
pam@1.4.0-11ubuntu2.7
no fix listed

Open the chart page →

7,929

Container images carrying it

1,905 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
pam@1.4.0-11ubuntu2.3
no fix listed
1
defactops/defactops-backend:1.0.2307b663c0092a
pam@1.5.2-6+deb12u1
no fix listed
1
dellcloud/category:distributed02fc234353a9
pam@1.3.1-5ubuntu4.1
no fix listed
1
dellcloud/pages:1.04d2eb25b9225
pam@1.3.1-5ubuntu4.1
no fix listed
1
dessalines/lemmy:0.19.2079e9f02c286c
pam@1.5.2-6+deb12u2
no fix listed
1
devopsgoofy/k8s-platform:latestad865312099f
pam@1.5.2-6+deb12u1
no fix listed
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
pam@1.5.2-6+deb12u1
no fix listed
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
pam@1.5.3-5ubuntu5.4
no fix listed
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
pam@1.3.1-5ubuntu4.3
no fix listed
1
diygod/rsshub:2025-11-097a6312cac0d5
pam@1.5.2-6+deb12u1
no fix listed
1
djjudas21/alertify:0.1.0ba22be670c37
pam@1.5.2-6+deb12u1
no fix listed
1
dniel/api-posts:master45a667852f2a
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed
1
dobtc/bitcoin:25.1a870f7cb1105
pam@1.5.2-6+deb12u1
no fix listed
1
dolibarr/dolibarr:24.0.069ec52e3b7ef
pam@1.5.2-6+deb12u2
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
pam@1.5.2-6+deb12u2
no fix listed
1
domainmod/domainmod:4.23.04017bfe4c597
pam@1.5.2-6
no fix listed
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
pam@1.3.1-5ubuntu4.7
no fix listed
1
dragonflyoss/client:v1.5.4a1b52779c4dd
pam@1.5.2-6+deb12u2
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
pam@1.5.2-6+deb12u1
no fix listed
1
dremio/dremio-oss:24.1.080ed2e3b7c43
pam@1.4.0-11ubuntu2.3
no fix listed
1
drorivry4/rego:lateste035d49b15ca
pam@1.5.2-6+deb12u1
no fix listed
1
drpcorg/dshackle:0.54.08858fae1859d
pam@1.4.0-11ubuntu2.3
no fix listed
1
drumsergio/genieacs:1.2.16.028244054e1bf
pam@1.5.2-6+deb12u2
no fix listed
1
dserio83/velero-api:0.3.16b3d9115fee2
pam@1.5.2-6+deb12u1
no fix listed
1
dserio83/velero-watchdog:0.1.8d5deae589229
pam@1.5.2-6+deb12u1
no fix listed
1
duck1123/cert-downloader:latest0e29f19fa67c
pam@1.4.0-11ubuntu2.3
no fix listed
1
duck1123/lnd-fileserver:latest9d6fb247b714
pam@1.4.0-11ubuntu2.3
no fix listed
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
pam@1.5.3-5ubuntu5.4
no fix listed
1
dzikoysk/reposilite:3.6.390de4c8e6c0e
pam@1.5.3-5ubuntu5.6
no fix listed
1
eceasy/cli-proxy-api:v7.3.3f9abbf3fa5fe
pam@1.5.2-6+deb12u2
no fix listed
1
eclipseaerios/self-orchestrator:1.2.08b123bec5679
pam@1.5.2-6+deb12u1
no fix listed
1
elastic/apm-server:7.17.6c7a1c63257d0
pam@1.3.1-5ubuntu4.3
no fix listed
1
elastictranscoder/media:627e21dc963ab3858c6b
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed
1
elastictranscoder/media-storage:f6d861a026208b8c2359
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed
1
elastiflow/flow-collector:7.26.0fee67842e16b
pam@1.5.3-5ubuntu5.5
no fix listed
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
pam@1.3.1-5ubuntu4.3
no fix listed
1
emqx/ecp-ui:2.5.1e33e9816f147
pam@1.5.2-6+deb12u1
no fix listed
1
enclavenetworks/enclave:latest0a99759300d1
pam@1.3.1-5ubuntu4.7
no fix listed
1
engrmth/bnkr:2.1.06d8464e6f0e8
pam@1.3.1-5ubuntu4.1
no fix listed
1
enix/san-iscsi-csi:v4.0.2f963da81ecf7
pam@1.1.8-3.6ubuntu2.18.04.3
no fix listed
1
envoyproxy/envoy:v1.30.92956bd9de830
pam@1.4.0-11ubuntu2.4
no fix listed
1
envoyproxy/envoy:v1.38.4447f857a0146
pam@1.4.0-11ubuntu2.7
no fix listed
1
envoyproxy/envoy:v1.33.056da5afd7df3
pam@1.4.0-11ubuntu2.4
no fix listed
1
envoyproxy/envoy:v1.31-latestcaa5b411be16
pam@1.4.0-11ubuntu2.6
no fix listed
1
envoyproxy/envoy:v1.34-latestcfc0678bc03c
pam@1.4.0-11ubuntu2.6
no fix listed
1
envoyproxy/envoy:v1.30.1e596fda6a0ce
pam@1.4.0-11ubuntu2.4
no fix listed
1
envoyproxy/envoy:v1.18.2e8b37c1d7578
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed
1
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
pam@1.1.8-3.6ubuntu2.18.04.4
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.