CVE-2024-10041

Medium

Advisory

Published 23 Oct 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 19th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,806; of 17,803 indexed, latest versions
Container images: 1,905; deployed by those charts
Fix available: 1 of 2; affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,806 of 17,803 indexed charts deploy, on 1,905 images.

Affected package	Affected versions	Fixed in	Images
pamdeb	1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+32 more	no fix listed	1,893
pamrpm	1.3.0-lp151.7.38, 1.5.1-12.el9, 1.5.1-14.el9, 1.5.1-15.el9+3 more	0:1.5.1-21.el9_5, 1.7.1-3.1, 1.7.1-160000.3.1	12

OSV records: DEBIAN-CVE-2024-10041 RHSA-2024:11250 UBUNTU-CVE-2024-10041 openSUSE-SU-2025:15477-1 SUSE-SU-2026:21192-1
Also known as: RHSA-2024:9941

Charts affected

1,806 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	pam@1.5.2-6+deb12u1	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	pam@1.5.2-6+deb12u1	no fix listed
library/mongo :latest	5211c51171f5	pam@1.5.3-5ubuntu5.6	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

13,875

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	pam@1.5.3-5ubuntu5	no fix listed

Open the chart page →

2,156

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

2,710

changedetection-iozekker6

1.101.0

1 of 1 See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	pam@1.5.2-6+deb12u2	no fix listed

Open the chart page →

2,649

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	pam@1.3.1-5ubuntu4.3	no fix listed

Open the chart page →

9,280

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	pam@1.4.0-11ubuntu2.7	no fix listed

Open the chart page →

7,949

Container images carrying it

1,905 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/serenita-org/vero :v0.8.3	e5a7ec714acc	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/sergelogvinov/mongosqld :2.14.23	0b826375ed42	pam@1.4.0-11ubuntu2.5	no fix listed	1
ghcr.io/sergelogvinov/mongosync :1.15.0	fa99ed475f03	pam@1.5.3-5ubuntu5.4	no fix listed	1
ghcr.io/sergelogvinov/pgbouncer :16.15	18f1121ba0a4	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/siafoundation/renterd :2.9.0	e0334f124863	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/siafoundation/s3d :bf33bf3	b3fcc85f7282	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/slskd/slskd :0.25.1	ab9ed50e028b	pam@1.5.3-5ubuntu5.5	no fix listed	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	pam@1.3.1-5ubuntu4.3	no fix listed	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	pam@1.3.1-5ubuntu4.3	no fix listed	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	pam@1.3.1-5ubuntu4.3	no fix listed	1
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	pam@1.5.3-5ubuntu5.4	no fix listed	1
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	pam@1.5.3-5ubuntu5.4	no fix listed	1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	pam@1.3.1-5ubuntu4.7	no fix listed	1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	pam@1.3.1-5ubuntu4.7	no fix listed	1
ghcr.io/squent/kuma-ingress-watcher :1.7.0	14d45b2a1f00	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	pam@1.3.1-5ubuntu4.3	no fix listed	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	pam@1.5.3-5ubuntu5.5	no fix listed	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	pam@1.5.3-5ubuntu5.5	no fix listed	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	pam@1.5.3-5ubuntu5.4	no fix listed	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	pam@1.5.3-5ubuntu5.5	no fix listed	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	pam@1.5.3-5ubuntu5.4	no fix listed	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	pam@1.5.3-5ubuntu5.5	no fix listed	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	pam@1.3.1-5ubuntu4.7	no fix listed	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	pam@1.3.1-5ubuntu4.7	no fix listed	1
ghcr.io/streamvisor/streamvisor :4.1.4	0bc598b2ac9a	pam@1.5.3-5ubuntu5.5	no fix listed	1
ghcr.io/strrl/wonder-mesh-net :v2026.629.0	625b140372fd	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	pam@1.5.3-5ubuntu5.1	no fix listed	1
ghcr.io/substra/substra-frontend :1.0.0	e230e6ac0722	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/sudo-kraken/3d-printing-cost-calculators :v1.1.1	220c5e4e1a3d	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/sudo-kraken/authentik-webfinger-proxy :v1.1.1	e1351a977607	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/sudo-kraken/fantasy-dice-chamber :v1.3.2	99fd4cb0f4fe	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/sudo-kraken/finances-tracker :v1.1.1	c73527cde81c	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/sudo-kraken/jf-pushover-webhook :v1.1.0	ee9cf22a39ab	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/suwayomi/suwayomi-server :v2.3.2320	d2c3218c7f9f	pam@1.5.3-5ubuntu5.6	no fix listed	1
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/toeverything/affine :0.27.4	b649f5ce2384	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/topolvm/pie :0.18.0	aa467443e407	pam@1.4.0-11ubuntu2.7	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	pam@1.4.0-11ubuntu2.7	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	pam@1.4.0-11ubuntu2.4	no fix listed	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	pam@1.5.3-5ubuntu5.1	no fix listed	1
ghcr.io/twigex/cospace :latest	e5ecfd607e42	pam@1.5.2-6+deb12u2	no fix listed	1
ghcr.io/virtuos/librechat_exporter :2.0.0	50ea1cf0086f	pam@1.5.2-6+deb12u1	no fix listed	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	pam@1.4.0-11ubuntu2.4	no fix listed	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	pam@1.4.0-11ubuntu2.4	no fix listed	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	pam@1.4.0-11ubuntu2.5	no fix listed	1
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	pam@1.5.2-6	no fix listed	1