CVE-2024-1013
HighAdvisory
Published 18 Mar 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.003
- 21st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 35
- of 17,781 indexed, latest versions
- Container images
- 30
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 35 of 17,781 indexed charts deploy, on 30 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| unixodbcdeb | 2.3.1-4.1, 2.3.6-0.1build1, 2.3.9-5, 2.3.11-2+deb12u1+2 more | 2.3.1-4.1ubuntu0.1~esm2, 2.3.6-0.1ubuntu0.1, 2.3.9-5ubuntu0.1, 2.3.12-1ubuntu0.24.04.1 | 30 |
- OSV records
- DEBIAN-CVE-2024-1013UBUNTU-CVE-2024-1013
- Also known as
- USN-6715-1, USN-6715-2
Charts affected
35 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| airflowairflow-helmVerified publisher | 8.9.0 | 1 of 4See more | 11,367 |
| netdatanetdataVerified publisher | 3.7.173 | 1 of 1See more | 3,092 |
| openldap-stack-hahelm-openldapVerified publisher | 4.3.3 | 1 of 5See more | 5,919 |
| zabbixcetic | 3.1.3 | 1 of 5See more | 33,725 |
| redashredash | 4.2.0 | 1 of 3See more | 5,987 |
| oneuptimeoneuptimeOfficialVerified publisher | 13.0.4 | 1 of 7See more | 11,192 |
| zabbix-serveraekondratievVerified publisher | 1.0.6 | 1 of 4See more | 30,668 |
| hasurahasura-extraVerified publisher | 3.0.1 | 1 of 1See more | 4,903 |
| dltbrokerassist-iot-distributed-broker | 0.2.0 | 1 of 9See more | 77,706 |
| dltloggingassist-iot-logging-auditing | 0.2.0 | 1 of 9See more | 77,687 |
| dbrepodbrepo | 1.13.3 | 1 of 25See more | 52,635 |
| dltkvassist-iot-data-integrity-verification | 0.2.0 | 1 of 9See more | 77,706 |
| dltflassist-iot-dlt-based-fl | 0.2.0 | 1 of 9See more | 77,706 |
| astrotrekastria | 0.0.2 | 1 of 4See more | 32,501 |
| opencvecfi2017 | 0.1.2 | 1 of 7See more | 15,371 |
| hlf-couchdbcloudnativeapp | 1.0.6 | 1 of 1See more | 33,963 |
| redashdasmeta | 0.1.0 | 1 of 1See more | 5,062 |
| dbgatedbgate-helm-chartVerified publisher | 0.1.8 | 1 of 1See more | 1,397 |
| adventurelogdjjudas21Verified publisher | 0.1.1 | 1 of 3See more | 7,459 |
| codecovdoubanVerified publisher | 0.2.4 | 1 of 8See more | 24,917 |
| drogue-cloud-examplesdrogue-iotVerified publisher | 0.7.11 | 1 of 6See more | 30,699 |
| teslamateegebackVerified publisher | 2.1.9 | 1 of 1See more | 1,001 |
| dawarichhelmforgeVerified publisher | 1.0.0 | 1 of 4See more | 4,742 |
| moodlehelmforgeVerified publisher | 1.1.0 | 1 of 2See more | 6,103 |
| nominatimheywood8-helm-chartsVerified publisher | 3.10.8 | 1 of 3See more | 14,290 |
| infisicalinfisical-charts | 0.4.2 | 1 of 3See more | 3,014 |
| opencloudjacobcolvinVerified publisher | 0.2.3 | 1 of 13See more | 45,239 |
| mindsdbkronkltdVerified publisher | 0.1.0 | 1 of 1See more | 9,620 |
| nominatimnominatim-chart | 1.3.0 | 1 of 3See more | 22,658 |
| rada-platformrada-platform | 0.1.0 | 1 of 7See more | 21,211 |
| rocketchat-voiprocketchat-server | 0.1.0 | 1 of 1See more | 5,683 |
| airflowsb-helm-charts | 0.3.0 | 1 of 1See more | 10,209 |
| backendsignalen | 4.24.0 | 1 of 4See more | 11,636 |
| infisicalsinextraVerified publisher | 0.6.0 | 1 of 1See more | 3,014 |
| opencloudunxwaresVerified publisher | 0.2.3 | 1 of 13See more | 45,239 |
Container images carrying it
30 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hyperledger/ | f6c724592abf | unixodbc | 2.3.1-4.1ubuntu0.1~esm2 | 4 |
| apache/ | ae0b86d3c4d0 | unixodbc | 2.3.12-1ubuntu0.24.04.1 | 2 |
| infisical/ | 02082bf13163 | unixodbc | no fix listed | 2 |
| apache/ | 64e58748b6b9 | unixodbc | no fix listed | 1 |
| apache/ | ce90bdc3d2af | unixodbc | no fix listed | 1 |
| apache/ | e5560ad0b86e | unixodbc | no fix listed | 1 |
| bitnamilegacy/ | 6e412c178ef9 | unixodbc | no fix listed | 1 |
| dbgate/ | f2dc7423ea88 | unixodbc | no fix listed | 1 |
| hasura/ | 0111b0204136 | unixodbc | 2.3.9-5ubuntu0.1 | 1 |
| hyperledger/ | c65891b6c237 | unixodbc | 2.3.1-4.1ubuntu0.1~esm2 | 1 |
| jpgouin/ | bfdd0088c776 | unixodbc | no fix listed | 1 |
| mediagis/ | c15e941485ef | unixodbc | 2.3.6-0.1ubuntu0.1 | 1 |
| mediagis/ | d0eae7b51374 | unixodbc | 2.3.9-5ubuntu0.1 | 1 |
| mindsdb/ | 163011c09299 | unixodbc | no fix listed | 1 |
| moodlehq/ | 922af5166835 | unixodbc | no fix listed | 1 |
| netdata/ | c45c71eb23ff | unixodbc | no fix listed | 1 |
| oneuptime/ | 6b2d98713711 | unixodbc | no fix listed | 1 |
| postgis/ | 7e00e8c3539f | unixodbc | no fix listed | 1 |
| redash/ | 00d813437db5 | unixodbc | no fix listed | 1 |
| redash/ | c5c9148f5c38 | unixodbc | no fix listed | 1 |
| rocketchat/ | cfba5c20a5cc | unixodbc | no fix listed | 1 |
| signalen/ | 760256000738 | unixodbc | no fix listed | 1 |
| teslamate/ | cc87082e7d67 | unixodbc | no fix listed | 1 |
| timescale/ | a8e3322e1cf9 | unixodbc | 2.3.9-5ubuntu0.1 | 1 |
| timescale/ | cdb9ae118899 | unixodbc | 2.3.9-5ubuntu0.1 | 1 |
| timescale/ | ed719c0cd19d | unixodbc | 2.3.9-5ubuntu0.1 | 1 |
| zabbix/ | 6c946b1f45cd | unixodbc | 2.3.6-0.1ubuntu0.1 | 1 |
| zabbix/ | d59ffa07f615 | unixodbc | 2.3.9-5ubuntu0.1 | 1 |
| ghcr.io/ | 8d943799621b | unixodbc | no fix listed | 1 |
| ghcr.io/ | 0250d9cb0d74 | unixodbc | no fix listed | 1 |