CVE-2024-11168

Medium

Advisory

Published 12 Nov 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.3; base score, highest
EPSS: 0.007; 49th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 352; of 17,787 indexed, latest versions
Container images: 327; deployed by those charts
Fix available: 7 of 7; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 352 of 17,787 indexed charts deploy, on 327 images.

Affected package	Affected versions	Fixed in	Images
python3.11deb	3.11.0~rc1-1~22.04, 3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3+1 more	3.11.0~rc1-1~22.04.1~esm2, 3.11.2-6+deb12u5	86
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+10 more	3.8.10-0ubuntu1~20.04.14	96
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more	2.7.6-8ubuntu0.6+esm28, 2.7.12-1ubuntu0~16.04.18+esm15, 2.7.17-1~18.04ubuntu1.13+esm10, 2.7.18-1~20.04.7+esm6+1 more	54
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+9 more	3.10.12-1~22.04.8	47
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	3.6.9-1~18.04ubuntu1.13+esm3	44
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	3.5.2-2ubuntu0~16.04.13+esm16	25
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	3.4.3-1ubuntu1~14.04.7+esm14	7

OSV records: DEBIAN-CVE-2024-11168 UBUNTU-CVE-2024-11168
Also known as: USN-7218-1, USN-7280-3, USN-7348-1, USN-7488-1

Charts affected

352 by stars

Chart

Latest

Affected images

Radar Score

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-11168.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.8

Open the chart page →

9,248

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-11168.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.8

Open the chart page →

14,100

Container images carrying it

327 by charts deploying them

A fixed version is listed for 7 of the 7 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	python3.8@3.8.10-0ubuntu1~20.04.4	3.8.10-0ubuntu1~20.04.14	1
ghcr.io/kore3lab/kore-board.terminal :v0.5.5	f52e66eff50b	python3.6@3.6.9-1~18.04ubuntu1.9	3.6.9-1~18.04ubuntu1.13+esm3	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.14	1
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u5	1
ghcr.io/nefelim4ag/pingdom-operator :0.0.15	f8c7afdcf439	python3.11@3.11.2-6+deb12u2	3.11.2-6+deb12u5	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	python2.7@2.7.18-1~20.04.1 python3.8@3.8.10-0ubuntu1~20.04.4	2.7.18-1~20.04.7+esm6 3.8.10-0ubuntu1~20.04.14	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.14	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.14	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.14	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	python3.8@3.8.10-0ubuntu1~20.04.13	3.8.10-0ubuntu1~20.04.14	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	python3.8@3.8.10-0ubuntu1~20.04.13	3.8.10-0ubuntu1~20.04.14	1
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	python3.10@3.10.12-1~22.04.6	3.10.12-1~22.04.8	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u5	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u5	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	2.7.17-1~18.04ubuntu1.13+esm10 3.6.9-1~18.04ubuntu1.13+esm3	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	python3.8@3.8.10-0ubuntu1~20.04.4	3.8.10-0ubuntu1~20.04.14	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	2.7.17-1~18.04ubuntu1.13+esm10 3.6.9-1~18.04ubuntu1.13+esm3	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u5	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	python3.8@3.8.5-1~20.04.2	3.8.10-0ubuntu1~20.04.14	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	python3.6@3.6.9-1~18.04ubuntu1.8	3.6.9-1~18.04ubuntu1.13+esm3	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	python3.8@3.8.5-1~20.04.2	3.8.10-0ubuntu1~20.04.14	1