CVE-2024-10041

Medium

Advisory

Published 23 Oct 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 19th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,806; of 17,803 indexed, latest versions
Container images: 1,905; deployed by those charts
Fix available: 1 of 2; affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,806 of 17,803 indexed charts deploy, on 1,905 images.

Affected package	Affected versions	Fixed in	Images
pamdeb	1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+32 more	no fix listed	1,893
pamrpm	1.3.0-lp151.7.38, 1.5.1-12.el9, 1.5.1-14.el9, 1.5.1-15.el9+3 more	0:1.5.1-21.el9_5, 1.7.1-3.1, 1.7.1-160000.3.1	12

OSV records: DEBIAN-CVE-2024-10041 RHSA-2024:11250 UBUNTU-CVE-2024-10041 openSUSE-SU-2025:15477-1 SUSE-SU-2026:21192-1
Also known as: RHSA-2024:9941

Charts affected

1,806 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	pam@1.5.2-6+deb12u1	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	pam@1.5.2-6+deb12u1	no fix listed
library/mongo :latest	5211c51171f5	pam@1.5.3-5ubuntu5.6	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

13,875

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	pam@1.5.3-5ubuntu5	no fix listed

Open the chart page →

2,156

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

2,710

changedetection-iozekker6

1.101.0

1 of 1 See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	pam@1.5.2-6+deb12u2	no fix listed

Open the chart page →

2,649

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	pam@1.3.1-5ubuntu4.3	no fix listed

Open the chart page →

9,280

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	pam@1.4.0-11ubuntu2.7	no fix listed

Open the chart page →

7,949

Container images carrying it

1,905 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/apache/flink-kubernetes-operator :c703255	e9c2ce635b89	pam@1.4.0-11ubuntu2.4	no fix listed	1
ghcr.io/appscode/csi-driver-cacerts :v0.6.0	ab213b156017	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/appscode/inbox-server :MailetGroup	4a2824296412	pam@1.4.0-11ubuntu2.4	no fix listed	1
ghcr.io/appscode/s3proxy :sha-a82ca68	20518335f9f9	pam@1.4.0-11ubuntu2.4	no fix listed	1
ghcr.io/argoproj-labs/mcp-for-argocd :v0.9.0	dffc6c719d86	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/astriaorg/account-monitor :latest	4c8b42890035	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/astriaorg/auctioneer :pr-1839	1386b7b5e555	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/astriaorg/conductor :1.1.0	1f97d131b1d1	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/astriaorg/evm-bridge-withdrawer :1.0.2	9c88e1aff357	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/astriaorg/hermes :0.5.0	4f33a0a9f75e	pam@1.5.3-5ubuntu5.1	no fix listed	1
ghcr.io/astriaorg/sequencer :latest	44f82ee0b24c	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/astriaorg/sequencer-relayer :latest	5f6c74993f08	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/atuinsh/atuin :18.12.0	e953fa9e36ef	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/base/node-reth :v1.1.1	8eb6e492fe3c	pam@1.5.3-5ubuntu5.5	no fix listed	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	pam@1.4.0-11ubuntu2.4	no fix listed	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	pam@1.4.0-11ubuntu2.3	no fix listed	1
ghcr.io/beslovas/duckdb-ui :1.3.2	72f35584026d	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/blockscout/smart-contract-verifier :main	9a43f0cc5797	pam@1.5.3-5ubuntu5.6	no fix listed	1
ghcr.io/botify-labs/airbyte_exporter :2.3.0	2105b1f33013	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	pam@1.3.1-5ubuntu4.6	no fix listed	1
ghcr.io/browserless/chrome :v2.56.7	d600eac6283f	pam@1.5.3-5ubuntu5.7	no fix listed	1
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	pam@1.5.3-5ubuntu5.6	no fix listed	1
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	pam@1.5.3-5ubuntu5.5	no fix listed	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/camunda-community-hub/zeebe-simple-monitor :2.6.2	d9d796a1b846	pam@1.4.0-11ubuntu2.3	no fix listed	1
ghcr.io/caninehq/canine :latest	a058034ca006	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.3	69b1d3c09cfa	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.0	fb609bc264d9	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.0	e7f9e8f1d565	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/cjmalloy/jasper :v1.3.282	726a947bb65b	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/cleanuparr/cleanuparr :2.10.6	8136c3beda7a	pam@1.5.3-5ubuntu5.7	no fix listed	1
ghcr.io/colenio/slo-reporting :0.3.31	6b64d194a27d	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/containeroo/filesystem-exporter :v1.5.2	a66121e16d4e	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/cosmicrocks/datum :v0.4.0beta	76771c3cc8c3	pam@1.5.3-5ubuntu5.5	no fix listed	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/ctfd/ctfd :3.8.2	870e396fddf8	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/dakera-ai/dakera-mcp :0.10.11	a3d48418b14a	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/damap-org/damap-backend :5.0.0	f3d0c7d35498	pam@1.5.3-5ubuntu5.5	no fix listed	1
ghcr.io/dask/dask :2024.1.0	080150de7d86	pam@1.3.1-5ubuntu4.6	no fix listed	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	pam@1.4.0-11ubuntu2.3	no fix listed	1
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	pam@1.3.1-5ubuntu4.3	no fix listed	1