CVE-2024-10041

Medium

Advisory

Published 23 Oct 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 19th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,810; of 17,805 indexed, latest versions
Container images: 1,894; deployed by those charts
Fix available: 1 of 2; affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,810 of 17,805 indexed charts deploy, on 1,894 images.

Affected package	Affected versions	Fixed in	Images
pamdeb	1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+32 more	no fix listed	1,882
pamrpm	1.3.0-lp151.7.38, 1.5.1-12.el9, 1.5.1-14.el9, 1.5.1-15.el9+3 more	0:1.5.1-21.el9_5, 1.7.1-3.1, 1.7.1-160000.3.1	12

OSV records: DEBIAN-CVE-2024-10041 RHSA-2024:11250 UBUNTU-CVE-2024-10041 openSUSE-SU-2025:15477-1 SUSE-SU-2026:21192-1
Also known as: RHSA-2024:9941

Charts affected

1,810 by stars

Chart

Latest

Affected images

Radar Score

oaisimopencord

0.1.7

2 of 3 See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	pam@1.1.8-3.6ubuntu2.18.04.2	no fix listed
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	pam@1.1.8-3.6ubuntu2.18.04.2	no fix listed

Open the chart page →

14,819

omec-control-planeopencord

0.1.31

5 of 8 See more

omec-control-plane opencord 0.1.31

5 of the 8 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
omecproject/c3po-hss :master-latest	638671ef4842	pam@1.1.8-3.2ubuntu2.3	no fix listed
omecproject/c3po-hssdb :master-latest	28a90cc26716	pam@1.3.1-5ubuntu4.2	no fix listed
omecproject/mme-exporter :paging-latest	bcc5f19fd676	pam@1.1.8-3.6ubuntu2.18.04.1	no fix listed
omecproject/ngic-cp :central-cp-multi-upfs-latest	24a389a0a4fe	pam@1.1.8-3.6ubuntu2.18.04.1	no fix listed
omecproject/openmme :master-latest	64776cb9edb3	pam@1.1.8-3.2ubuntu2.1	no fix listed

Open the chart page →

104,037

onosopencord

3.0.2

1 of 1 See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
onosproject/onos :2.2.1	44914a8d4b3f	pam@1.1.8-3.6ubuntu2.18.04.1	no fix listed

Open the chart page →

12,942

onos-progranopencord

1.2.7

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	pam@1.1.8-3.2ubuntu2	no fix listed

Open the chart page →

94,372

ovspluginopencord

1.0.2

1 of 1 See more

ovsplugin opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
gopinatht/ovs-plugin-installer :latest	632cb2e9c399	pam@1.1.8-3.2ubuntu2.1	no fix listed

Open the chart page →

4,183

ponsimv2opencord

1.2.3

1 of 2 See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
voltha/voltha-tester :1.7.0	655c3048a602	pam@1.1.8-3.2ubuntu2.1	no fix listed

Open the chart page →

65,092

sebaopencord

1.0.0

6 of 17 See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
tpdock/freeradius :2.2.9	3da600c95a49	pam@1.1.8-3.2ubuntu2	no fix listed
voltha/voltha-cli :1.6.0	c4e41e92f046	pam@1.1.8-3.2ubuntu2.1	no fix listed
voltha/voltha-envoy :1.6.0	59ab2a00f712	pam@1.1.8-1ubuntu2.2	no fix listed
voltha/voltha-netconf :1.6.0	37f80524c207	pam@1.1.8-3.2ubuntu2.1	no fix listed
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	pam@1.1.8-3.2ubuntu2.1	no fix listed
voltha/voltha-voltha :1.6.0	ff596b62de59	pam@1.1.8-3.2ubuntu2.1	no fix listed

Open the chart page →

356,120

voltha-infraopencord

2.14.0

4 of 10 See more

voltha-infra opencord 2.14.0

4 of the 10 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	pam@1.1.8-3.6ubuntu2.18.04.1	no fix listed
library/ubuntu :16.04	1f1a2d56de1d	pam@1.1.8-3.2ubuntu2.3	no fix listed
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	pam@1.1.8-3.6ubuntu2.18.04.6	no fix listed
voltha/voltha-onos :5.1.8	e038acb950d3	pam@1.1.8-3.6ubuntu2.18.04.1	no fix listed

Open the chart page →

41,148

opencost-parquet-exporteropencost

0.3.1

1 of 1 See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

11,088

dokuopenlit

0.1.4

1 of 3 See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :latest	fa394da808cc	pam@1.4.0-11ubuntu2.7	no fix listed

Open the chart page →

1,748

openlitopenlit

1.24.0

1 of 3 See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.4.1	2e6587b81a26	pam@1.3.1-5ubuntu4.7	no fix listed

Open the chart page →

5,220

openlit-controlleropenlit

0.10.0

1 of 1 See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	pam@1.5.2-6+deb12u2	no fix listed

Open the chart page →

1,412

openpanelopenpanel

0.9.0

1 of 6 See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :25.10.2.65	e019438e1e05	pam@1.4.0-11ubuntu2.6	no fix listed

Open the chart page →

3,477

llm-stackopenproject-helm-charts

1.1.0

1 of 2 See more

llm-stack openproject-helm-charts 1.1.0

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
apache/apisix :3.16.0-ubuntu	5e47692cac00	pam@1.5.3-5ubuntu5.5	no fix listed

Open the chart page →

2,032

chatbot-ai-sampleopenshift

0.1.6

2 of 4 See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	pam@1.5.1-19.el9	0:1.5.1-21.el9_5
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	pam@1.5.1-19.el9	0:1.5.1-21.el9_5

Open the chart page →

19,181

exporteropenshift

1.0.47

2 of 3 See more

exporter openshift 1.0.47

2 of the 3 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	pam@1.5.1-20.el9	0:1.5.1-21.el9_5
public.ecr.aws/perfectscale-io/ubi9/ubi :9.5	d7c3def9252b	pam@1.5.1-20.el9	0:1.5.1-21.el9_5

Open the chart page →

13,076

fineractopenshift

0.1.1

1 of 4 See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
library/mariadb :11.4	611a2fcc5fa7	pam@1.5.3-5ubuntu5.6	no fix listed

Open the chart page →

7,889

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	pam@1.5.1-14.el9	0:1.5.1-21.el9_5

Open the chart page →

8,687

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	pam@1.1.8-3.6ubuntu2.18.04.2	no fix listed

Open the chart page →

77,005

openvscode-serveropenvscode-server-helm

2.7.38

1 of 2 See more

openvscode-server openvscode-server-helm 2.7.38

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
antiantiops/vscode-browser-docker :1.138.0	d1182e8090a7	pam@1.5.3-5ubuntu5.7	no fix listed

Open the chart page →

4,232

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	pam@1.1.8-3.6ubuntu2.18.04.1	no fix listed

Open the chart page →

97,725

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	pam@1.1.8-1ubuntu2.2	no fix listed

Open the chart page →

26,367

hiveopstty

0.1.9

1 of 4 See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16	233f361c5819	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

4,732

grrosdfir-infrastructure

1.0.3

2 of 5 See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	pam@1.4.0-11ubuntu2.4	no fix listed
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

11,047

osdfir-infrastructureosdfir-infrastructure

2.15.0

22 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

22 of the 40 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
bitnamilegacy/git :latest	4b08d0c5af8d	pam@1.5.2-6+deb12u1	no fix listed
library/mariadb :11.3.2	e101f9db3191	pam@1.4.0-11ubuntu2.4	no fix listed
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	pam@1.5.2-6+deb12u1	no fix listed
ghcr.io/openrelik/openrelik-mediator :latest	42efc445b19e	pam@1.5.2-6+deb12u2	no fix listed
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	pam@1.5.2-6+deb12u2	no fix listed
ghcr.io/openrelik/openrelik-server :latest	ce1132261523	pam@1.5.2-6+deb12u2	no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config :latest	1269d3d8d2c2	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-logs :latest	b175cc61959a	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-capa :latest	71323a4f3fc5	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-chromecreds :latest	76d4fbcc6ff0	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-cloud-logs :latest	a5d7e3cf71d3	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-dfindexeddb :latest	31966a825782	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-floss :latest	7a331eb83c6a	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-grep :latest	470ff3529746	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-strings :latest	6e05055b701f	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	pam@1.5.3-5ubuntu5.5	no fix listed
ghcr.io/openrelik/openrelik-worker-yara :latest	bd7fbf4505b5	pam@1.5.3-5ubuntu5.5	no fix listed

Open the chart page →

184,580

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	pam@1.4.0-11ubuntu2.6	no fix listed

Open the chart page →

3,685

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

3,354

k3p2p-avs

0.1.5

1 of 2 See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	pam@1.4.0-11ubuntu2.6	no fix listed

Open the chart page →

2,355

mishtip2p-avs

0.1.0

1 of 2 See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	pam@1.4.0-11ubuntu2.6	no fix listed

Open the chart page →

4,065

radiusp2p-avs

0.1.0

1 of 1 See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
theradius/loggia :0.4	63ba348546ec	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

12,449

ungatep2p-avs

0.1.0

3 of 3 See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	pam@1.5.2-6+deb12u1	no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	pam@1.5.2-6+deb12u1	no fix listed
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	pam@1.4.0-11ubuntu2.6	no fix listed

Open the chart page →

27,640

p4p4

0.1.0

4 of 7 See more

p4 p4 0.1.0

4 of the 7 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	pam@1.1.8-3.6ubuntu2.18.04.6	no fix listed
library/mongo :5.0-focal	5e15a3f014ed	pam@1.3.1-5ubuntu4.7	no fix listed
library/rabbitmq :3.11-management	c3f70098e01d	pam@1.4.0-11ubuntu2.4	no fix listed
mastercloudapps/planner :v1.23	40a950b311b2	pam@1.4.0-11ubuntu2.3	no fix listed