CVE-2024-10041

Medium

Advisory

Published 23 Oct 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 19th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,806; of 17,792 indexed, latest versions
Container images: 1,904; deployed by those charts
Fix available: 1 of 2; affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,806 of 17,792 indexed charts deploy, on 1,904 images.

Affected package	Affected versions	Fixed in	Images
pamdeb	1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+32 more	no fix listed	1,892
pamrpm	1.3.0-lp151.7.38, 1.5.1-12.el9, 1.5.1-14.el9, 1.5.1-15.el9+3 more	0:1.5.1-21.el9_5, 1.7.1-3.1, 1.7.1-160000.3.1	12

OSV records: DEBIAN-CVE-2024-10041 RHSA-2024:11250 UBUNTU-CVE-2024-10041 openSUSE-SU-2025:15477-1 SUSE-SU-2026:21192-1
Also known as: RHSA-2024:9941

Charts affected

1,806 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	pam@1.5.2-6+deb12u1	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	pam@1.5.2-6+deb12u1	no fix listed
library/mongo :latest	5211c51171f5	pam@1.5.3-5ubuntu5.6	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

13,813

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	pam@1.5.3-5ubuntu5	no fix listed

Open the chart page →

2,152

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

2,692

changedetection-iozekker6

1.99.0

1 of 1 See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.4	7bb6963b730d	pam@1.5.2-6+deb12u2	no fix listed

Open the chart page →

2,630

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	pam@1.3.1-5ubuntu4.3	no fix listed

Open the chart page →

9,272

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	pam@1.4.0-11ubuntu2.7	no fix listed

Open the chart page →

7,936

Container images carrying it

1,904 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
owncloud/server :10.16.3	b3f9efdcd7f7	pam@1.4.0-11ubuntu2.7	no fix listed	1
oxfordsemantic/rdfox :5.6	db17910eb855	pam@1.3.1-5ubuntu4.3	no fix listed	1
oxfordsemantic/rdfox-init :5.6	baf570ff968d	pam@1.3.1-5ubuntu4.3	no fix listed	1
pangeo/base-notebook :2024.01.15	5fbe688a4f80	pam@1.4.0-11ubuntu2.3	no fix listed	1
payara/server-full :7.2026.2-jdk25	31f1253f0cf8	pam@1.4.0-11ubuntu2.6	no fix listed	1
penpotapp/backend :2.2.1	47853d9bb9dd	pam@1.4.0-11ubuntu2.4	no fix listed	1
penpotapp/exporter :2.2.1	5c835ffd87ab	pam@1.4.0-11ubuntu2.4	no fix listed	1
pgvector/pgvector :pg17	cf134a767f47	pam@1.5.2-6+deb12u2	no fix listed	1
phan2410/dummy-service :0.0.8	9c6ed6de26ca	pam@1.5.2-6+deb12u1	no fix listed	1
phan2410/falcon-asgi-server :0.1.0	4a86d138832d	pam@1.5.2-6+deb12u1	no fix listed	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	pam@1.4.0-11ubuntu2.3	no fix listed	1
photoprism/photoprism :220629-jammy	2954334adbda	pam@1.4.0-11ubuntu2	no fix listed	1
photoprism/photoprism :240711-ce	fc6fd632ca74	pam@1.5.3-5ubuntu5.1	no fix listed	1
pk910/powfaucet :v2-stable	3dcae6a62896	pam@1.5.2-6+deb12u1	no fix listed	1
plantuml/plantuml-server :jetty-v1.2026.8	5f6f99ec2fc1	pam@1.5.3-5ubuntu5.5	no fix listed	1
platform9community/admin-server :latest	de3fa9b70df1	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed	1
platform9community/api-gateway :latest	40a4970de568	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed	1
platform9community/customers-service :latest	2089811e5cc6	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed	1
platform9community/vets-service :latest	d1165c94dfb3	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed	1
platform9community/visits-service :latest	8d11b50368c6	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed	1
plexinc/pms-docker :1.25.4.5487-648a8f9f9	46ea59b96f2b	pam@1.3.1-5ubuntu4.3	no fix listed	1
plexinc/pms-docker :1.43.3.10896-cb3ebc72d	83a425ae9e13	pam@1.5.3-5ubuntu5.6	no fix listed	1
plexinc/pms-docker :1.19.5.3112-b23ab3896	b598abb134ad	pam@1.1.8-3.2ubuntu2.1	no fix listed	1
pococze/python-hello-elos :2.0.0	7a1aab425e51	pam@1.5.2-6+deb12u1	no fix listed	1
posit/package-manager :2026.09.0-ubuntu-24.04	527493ef621b	pam@1.5.3-5ubuntu5.7	no fix listed	1
pozetroninc/keydb :v6.0.16	53ae64f29da8	pam@1.1.8-3.6ubuntu2.18.04.2	no fix listed	1
pposkrobko/risk-advisor :v1.0.0	eaf260341dba	pam@1.1.8-3.2ubuntu2	no fix listed	1
praravind1801/helmimages :3.0.0	f29d637b9ce1	pam@1.5.2-6+deb12u1	no fix listed	1
prefecthq/prefect :2.20.4-python3.10	1df4b5b6238a	pam@1.5.2-6+deb12u1	no fix listed	1
probely/farcaster-onprem-agent :v3	741b34e8166f	pam@1.5.2-6+deb12u2	no fix listed	1
project2team4/react :latest	3ff031a08887	pam@1.3.1-5ubuntu4.3	no fix listed	1
prom/cloudwatch-exporter :v0.16.0	71c2e988af06	pam@1.5.3-5ubuntu5.1	no fix listed	1
promzeus/redis-sentinel-gateway :v1	82f6d56e280b	pam@1.5.2-6+deb12u1	no fix listed	1
prowlercloud/prowler-api :5.31.1	4f252d579be2	pam@1.5.2-6+deb12u2	no fix listed	1
proxysql/proxysql :2.7.3	a4d6c35c2949	pam@1.5.2-6+deb12u1	no fix listed	1
pschichtel/mindustry-server :v145.1	b543e9c2d371	pam@1.4.0-11ubuntu2.4	no fix listed	1
psorab/elibrary :latest	53b68896c4ce	pam@1.3.1-5ubuntu4.6	no fix listed	1
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	pam@1.3.1-5ubuntu4.3	no fix listed	1
puppet/puppet-agent :7.14.0	0b6fd9a6b7da	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed	1
qdrant/qdrant :v1.7.4	5f2a56b95266	pam@1.5.2-6+deb12u1	no fix listed	1
qdrant/qdrant :v1.4.1	66ee661d5241	pam@1.5.2-6	no fix listed	1
qonstrukt/php :8.4-v8-apache	089af7925aa1	pam@1.5.3-5ubuntu5.5	no fix listed	1
quickwit/quickwit :v0.8.1	d29332bdadcc	pam@1.5.2-6+deb12u1	no fix listed	1
qumine/minecraft-server :v0.1.15	c0b650d51132	pam@1.4.0-11ubuntu2	no fix listed	1
qxip/qryn :3.2.39	77acc9c7a9fd	pam@1.5.2-6+deb12u1	no fix listed	1
rabeh/apibootspring :1.0	941007b6946e	pam@1.4.0-11ubuntu2.3	no fix listed	1
radarbase/radar-push-endpoint :0.4.0	e1758508e033	pam@1.5.3-5ubuntu5.1	no fix listed	1
radarbase/radar-redcapintegration :1.0.6	fcd973d4796d	pam@1.5.3-5ubuntu5.1	no fix listed	1
radondb/clickhouse-server :v21.1.3.32-stable	4732df471073	pam@1.1.8-3.6ubuntu2.18.04.2	no fix listed	1
rancher/local-path-provisioner :v0.0.5	e66f32d19eb9	pam@1.1.8-3.2ubuntu2.1	no fix listed	1