CVE-2024-10041
MediumAdvisory
Published 23 Oct 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.7
- base score, highest
- EPSS
- 0.003
- 19th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,864
- of 17,832 indexed, latest versions
- Container images
- 1,957
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Red Hat Security Advisory: pam security update
Carried by container images the latest versions of 1,864 of 17,832 indexed charts deploy, on 1,957 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pamdeb | 1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+32 more | no fix listed | 1,941 |
| pamrpm | 1.3.0-lp151.7.38, 1.3.0-lp152.10.25, 1.5.1-12.el9, 1.5.1-14.el9+4 more | 0:1.5.1-21.el9_5, 1.7.1-3.1, 1.7.1-160000.3.1 | 16 |
- OSV records
- DEBIAN-CVE-2024-10041RHSA-2024:11250UBUNTU-CVE-2024-10041openSUSE-SU-2025:15477-1SUSE-SU-2026:21192-1
- Also known as
- RHSA-2024:9941
Charts affected
1,864 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| wordpresswordpress-ng | 1.0.9 | 1 of 2See more | 3,969 |
| playwright-synthetic-monitoringwork-adventure | 1.0.1 | 1 of 1See more | 14,298 |
| workshop-pipelinesworkshop-pipelines | 0.1.6 | 1 of 2See more | 11,660 |
| am-pattern-1wso2 | 2.6.0-7 | 2 of 6See more | 31,730 |
| tabbyxdVerified publisher | 1.0.6 | 1 of 2See more | 7,751 |
| xkopsxkops | 0.1.0 | 4 of 5See more | 13,934 |
| xlinexline | 0.0.1 | 1 of 1See more | 2,189 |
| cloudeye-exporterxxl-job-adminVerified publisher | 0.1.2 | 1 of 1See more | 2,695 |
| nightingalexxl-job-adminVerified publisher | 0.2.11 | 3 of 6See more | 9,769 |
| pgcatxxl-job-adminVerified publisher | 0.3.3 | 1 of 1See more | 3,193 |
| api-snapyoukadevVerified publisher | 0.1.1 | 1 of 1See more | 2,709 |
| changedetection-iozekker6Verified publisher | 1.102.0 | 1 of 1See more | 2,701 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,340 |
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 8,105 |
Container images carrying it
1,957 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| moreillon/ | b067dbbbb6af | pam | no fix listed | 2 |
| ngick8stesting/ | 1e764eab77b4 | pam | no fix listed | 2 |
| obsidiandynamics/ | 5337c9e0e2de | pam | no fix listed | 2 |
| omecproject/ | cfdb566dd949 | pam | no fix listed | 2 |
| opea/ | 5c9639de61c1 | pam | no fix listed | 2 |
| opea/ | e48613afb191 | pam | no fix listed | 2 |
| opea/ | eb746b263705 | pam | no fix listed | 2 |
| opencloudeu/ | 1691ad6612a3 | pam | no fix listed | 2 |
| opencloudeu/ | 27cb9b952f0d | pam | no fix listed | 2 |
| opencloudeu/ | 5b176baa3694 | pam | no fix listed | 2 |
| opencloudeu/ | 6e8b2df6c5a4 | pam | no fix listed | 2 |
| opencloudeu/ | 82f888a34440 | pam | no fix listed | 2 |
| opencloudeu/ | e0ac35a9576e | pam | no fix listed | 2 |
| opendatacube/ | 668cbb41473c | pam | no fix listed | 2 |
| openebs/ | c86c06f1ce6a | pam | no fix listed | 2 |
| patrikx3/ | f19eb45b0694 | pam | no fix listed | 2 |
| pgvector/ | ccc6e83d6e35 | pam | no fix listed | 2 |
| piomin/ | 871f784dd6bc | pam | no fix listed | 2 |
| qichenxu4pd/ | f3a8502bc21b | pam | no fix listed | 2 |
| quickwit/ | 363ff56ce456 | pam | no fix listed | 2 |
| radondb/ | 4732df471073 | pam | no fix listed | 2 |
| rajnandan1/ | 30407afca731 | pam | no fix listed | 2 |
| redis/ | 1c5f43fddcdd | pam | no fix listed | 2 |
| redis/ | 72035434f455 | pam | no fix listed | 2 |
| redis/ | e44b2b49d059 | pam | no fix listed | 2 |
| rotationalio/ | 0e7ad3a031dc | pam | no fix listed | 2 |
| sigp/ | 44aa773dcf27 | pam | no fix listed | 2 |
| sigp/ | 9a62bb870545 | pam | no fix listed | 2 |
| smartedge/ | 4cd63c22ce36 | pam | no fix listed | 2 |
| speckle/ | 4bd113093583 | pam | no fix listed | 2 |
| streamnative/ | 0e6d7aa3ef32 | pam | no fix listed | 2 |
| svtechnmaa/ | b2987abe57d3 | pam | no fix listed | 2 |
| testinprod/ | 0a125bd77a2d | pam | no fix listed | 2 |
| tzahi12345/ | 2f943d584711 | pam | no fix listed | 2 |
| uffizzi/ | 0344805f267b | pam | no fix listed | 2 |
| vdiogov/ | 6945f84f0058 | pam | no fix listed | 2 |
| wolveix/ | e103700ae6ae | pam | no fix listed | 2 |
| wurstmeister/ | 7a7fd44a7210 | pam | no fix listed | 2 |
| zabbix/ | 349b924472a7 | pam | no fix listed | 2 |
| gcr.io/ | fbe12aa24de6 | pam | no fix listed | 2 |
| ghcr.io/ | 536358d7b17e | pam | no fix listed | 2 |
| ghcr.io/ | 3ea8164b0eae | pam | no fix listed | 2 |
| ghcr.io/ | b1ba7b054af2 | pam | no fix listed | 2 |
| ghcr.io/ | 82d0b161161d | pam | no fix listed | 2 |
| ghcr.io/ | 5be52524664c | pam | no fix listed | 2 |
| ghcr.io/ | 5f545698e907 | pam | no fix listed | 2 |
| ghcr.io/ | 7962759d99d7 | pam | no fix listed | 2 |
| ghcr.io/ | f34f98405c10 | pam | no fix listed | 2 |
| ghcr.io/ | 103fbcec2314 | pam | no fix listed | 2 |
| ghcr.io/ | 9b6105be7ad0 | pam | no fix listed | 2 |