StackRadar

CVE-2024-10963

High

Advisory

Published 7 Nov 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
115
of 17,781 indexed, latest versions
Container images
119
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 115 of 17,781 indexed charts deploy, on 119 images.

Affected packageAffected versionsFixed inImages
pamdeb1.5.3-5ubuntu5, 1.5.3-5ubuntu5.1, 1.5.3-5ubuntu5.41.5.3-5ubuntu5.5105
pamrpm1.3.0-lp151.7.38, 1.5.1-12.el9, 1.5.1-14.el9, 1.5.1-15.el9+2 more0:1.5.1-22.el9_5, 0:1.5.1-23.el9_4, 1.7.0-2.114
OSV records
RHSA-2024:10232RHSA-2024:10244UBUNTU-CVE-2024-10963openSUSE-SU-2024:14563-1RLSA-2024:10244
Also known as
USN-7761-1

Charts affected

115 by stars
ChartLatestAffected imagesRadar Score
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5

Open the chart page →

3,018
s3-proxyradar-baseVerified publisher0.6.01 of 1See more

s3-proxy radar-base 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5

Open the chart page →

2,737
devtron-enterpriseromholdings48.0.04 of 28See more

devtron-enterprise romholdings 48.0.0

4 of the 28 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5

Open the chart page →

68,240
devtron-operatorromholdings0.23.33 of 11See more

devtron-operator romholdings 0.23.3

3 of the 11 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5

Open the chart page →

32,902
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5

Open the chart page →

6,094
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5

Open the chart page →

2,815
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5

Open the chart page →

3,232
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5

Open the chart page →

2,031
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5

Open the chart page →

3,153
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5

Open the chart page →

2,540
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5

Open the chart page →

4,731
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5

Open the chart page →

8,193
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.5

Open the chart page →

45,239
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5

Open the chart page →

7,628
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-10963.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.5

Open the chart page →

2,097

Container images carrying it

119 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kong/kong:3.9.16addf50e6bd8
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5
1
library/mariadb:11.7.2fcc7fcd7114a
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
library/mongo:8.0.11dca8d11fe467
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5
1
linuxserver/calibre-web:0.6.24241009026e6f
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5
1
linuxserver/foldingathome:7.6.219a997426d71e
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
netbirdio/management:0.45.10c9994b393ea
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
nethermind/nethermind:1.31.893e57917371a
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
nethermind/nethermind:1.31.9aeca3b55bda5
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
obolnetwork/helios:e10e753cb7e97d39d46
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
opendatacube/explorer:latest120457ffcd69
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5
1
openvino/model_server:2025.2.11e7cd1d70cc1
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5
1
photoprism/photoprism:240711-cefc6fd632ca74
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
radarbase/radar-push-endpoint:0.4.0e1758508e033
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
rrobetti/ojp:0.1.0-beta1141bd88232b
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
schemahero/schemahero-manager:0.22.11609e1a05cd3
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5
1
snipe/snipe-it:v8.3.1141ebf2386fe
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5
1
stashapp/stash-box:latesta534c8afdf39
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
structurizr/onpremises:2025.11.094b5ffb5119c8
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.5
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.5
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.5
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
pam@1.5.1-12.el9
0:1.5.1-22.el9_5
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/grycap/im:latest06a16d4f279f
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
pam@1.5.3-5ubuntu5.4
1.5.3-5ubuntu5.5
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
pam@1.5.1-15.el9
0:1.5.1-22.el9_5
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.5
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.