CVE-2024-10041

Medium

Advisory

Published 23 Oct 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 18th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,807; of 17,790 indexed, latest versions
Container images: 1,905; deployed by those charts
Fix available: 1 of 2; affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,807 of 17,790 indexed charts deploy, on 1,905 images.

Affected package	Affected versions	Fixed in	Images
pamdeb	1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+32 more	no fix listed	1,893
pamrpm	1.3.0-lp151.7.38, 1.5.1-12.el9, 1.5.1-14.el9, 1.5.1-15.el9+3 more	0:1.5.1-21.el9_5, 1.7.1-3.1, 1.7.1-160000.3.1	12

OSV records: DEBIAN-CVE-2024-10041 RHSA-2024:11250 UBUNTU-CVE-2024-10041 openSUSE-SU-2025:15477-1 SUSE-SU-2026:21192-1
Also known as: RHSA-2024:9941

Charts affected

1,807 by stars

Chart

Latest

Affected images

Radar Score

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

11,603

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

7,697

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	pam@1.5.2-6+deb12u1	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	pam@1.5.2-6+deb12u1	no fix listed
library/mongo :latest	5211c51171f5	pam@1.5.3-5ubuntu5.6	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

13,783

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	pam@1.5.3-5ubuntu5	no fix listed

Open the chart page →

2,142

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	pam@1.5.2-6+deb12u1	no fix listed

Open the chart page →

2,684

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	pam@1.1.8-3.6ubuntu2.18.04.3	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	pam@1.3.1-5ubuntu4.3	no fix listed

Open the chart page →

9,256

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-10041.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	pam@1.4.0-11ubuntu2.7	no fix listed

Open the chart page →

7,929

Container images carrying it

1,905 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
beanbag/reviewboard :latest	6b840f546e1c	pam@1.4.0-11ubuntu2.7	no fix listed	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	pam@1.5.2-6+deb12u1	no fix listed	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	pam@1.3.1-5ubuntu4.3	no fix listed	1
bicarus/mx-notifier :1.1.8	bed688d16762	pam@1.3.1-5ubuntu4.3	no fix listed	1
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/clickhouse :24.12.3-debian-12-r1	3cf6544f6c6c	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/clickhouse :24.12.4	c7e70bf1d3fb	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/clickhouse :24.6.2-debian-12-r3	dcc172c6c55f	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/git :latest	4b08d0c5af8d	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/kubectl :1.30	1249fc292e84	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/kubectl :1.31	64614ef8290f	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/kubectl :1.30.5	744f84cf7493	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/kube-state-metrics :2	04a3044b384b	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mariadb :11.3.2-debian-12-r9	320c70dfd914	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mariadb :11.2.6-debian-12-r0	373c3c260571	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mariadb :11.4.3-debian-12-r0	8b3778160e34	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mariadb :11.4.7-debian-12-r2	90dc6acb7b2e	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mariadb :latest	bbd4e17f1ef8	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mariadb-galera :11.4.3-debian-12-r0	cb8beb6dbb58	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/memcached :1.6.24-debian-12-r0	1d80b6a96f00	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/memcached :1.6.29-debian-12-r4	ff0e7239c17c	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/minio :2025.7.23-debian-12-r0	8935e75fa5d1	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/minio :2025.3.12-debian-12-r0	ba9f3b4b0b00	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/minio :2024.12.18-debian-12-r1	c0ede65eb88e	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/minio :2025.4.22-debian-12-r1	d7cd0e172c4c	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mongodb :8.0.13-debian-12-r0	2579e968033e	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mongodb :7.0.8-debian-12-r2	3163c3842bfd	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mongodb :latest	b0652af9c8d0	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mysql :8.4.5-debian-12-r0	7089d796fc9b	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/nginx :1.27.1	934d1acd5ca8	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/openldap :2.6.8-debian-12-r1	6e412c178ef9	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	pam@1.5.2-6+deb12u1	no fix listed	1
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	pam@1.5.2-6+deb12u1	no fix listed	1