CVE-2024-10041

Medium

Advisory

Published 23 Oct 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 19th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,806; of 17,803 indexed, latest versions
Container images: 1,905; deployed by those charts
Fix available: 1 of 2; affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,806 of 17,803 indexed charts deploy, on 1,905 images.

Affected package	Affected versions	Fixed in	Images
pamdeb	1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+32 more	no fix listed	1,893
pamrpm	1.3.0-lp151.7.38, 1.5.1-12.el9, 1.5.1-14.el9, 1.5.1-15.el9+3 more	0:1.5.1-21.el9_5, 1.7.1-3.1, 1.7.1-160000.3.1	12

OSV records: DEBIAN-CVE-2024-10041 RHSA-2024:11250 UBUNTU-CVE-2024-10041 openSUSE-SU-2025:15477-1 SUSE-SU-2026:21192-1
Also known as: RHSA-2024:9941

Charts affected

1,806 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	pam@1.5.2-6+deb12u1	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	pam@1.5.2-6+deb12u1	no fix listed
library/mongo :latest	5211c51171f5	pam@1.5.3-5ubuntu5.6	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

13,875

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	pam@1.5.3-5ubuntu5	no fix listed

Open the chart page →

2,156

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

2,710

changedetection-iozekker6

1.101.0

1 of 1 See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	pam@1.5.2-6+deb12u2	no fix listed

Open the chart page →

2,649

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	pam@1.3.1-5ubuntu4.3	no fix listed

Open the chart page →

9,280

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	pam@1.4.0-11ubuntu2.7	no fix listed

Open the chart page →

7,949

Container images carrying it

1,905 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	pam@1.5.2-6+deb12u1	no fix listed	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	pam@1.5.2-6+deb12u1	no fix listed	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.9.0	f9d65db8bda2	pam@1.5.2-6+deb12u2	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.13.4	1eb5a85180a4	pam@1.5.2-6+deb12u2	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	pam@1.5.2-6+deb12u1	no fix listed	1