StackRadarChart IndexLive demo

CVE-2024-11187

High

Advisory

Published 29 Jan 2025In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.167; 97th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 106; of 17,781 indexed, latest versions
Container images: 103; deployed by those charts
Fix available: 3 of 5; affected packages

Red Hat Security Advisory: bind security update

Carried by container images the latest versions of 106 of 17,781 indexed charts deploy, on 103 images.

Affected package	Affected versions	Fixed in	Images
bind9deb	1:9.11.3+dfsg-1ubuntu1.1, 1:9.11.3+dfsg-1ubuntu1.12, 1:9.11.3+dfsg-1ubuntu1.13, 1:9.11.3+dfsg-1ubuntu1.14+30 more	1:9.16.50-1~deb11u3, 1:9.18.30-0ubuntu0.20.04.2, 1:9.18.30-0ubuntu0.22.04.2, 1:9.18.30-0ubuntu0.24.04.2+1 more	73
bindapk	9.18.13-r2, 9.18.16-r0, 9.18.19-r0, 9.18.19-r1+3 more	9.18.33-r0	15
bindrpm	32:9.11.13-6.el8_2.4, 32:9.11.26-4.el8_4, 32:9.11.26-4.el8_4.1, 32:9.11.36-3.el8_6.5+7 more	2:9.11.36-16.el8_10.4, 32:9.11.36-8.el8_8.7, 32:9.11.36-16.el8_10.4, 32:9.16.23-18.el9_4.9+1 more	14
bind9-libsdeb	1:9.11.19+dfsg-2.1ubuntu3	no fix listed	1
isc-dhcpdeb	4.3.5-3ubuntu7.1	no fix listed	1

OSV records: ALPINE-CVE-2024-11187 DEBIAN-CVE-2024-11187 RHSA-2025:1666 RHSA-2025:1669 RHSA-2025:1675 RHSA-2025:1681 UBUNTU-CVE-2024-11187 DLA-4050-1 RLSA-2025:1675
Also known as: RHSA-2025:1684, RHSA-2025:1687, RHSA-2025:1691, USN-7241-1

Charts affected

106 by stars

Chart

Latest

Affected images

Radar Score

maxscalesvtech-public-helm-charts

1 of 2 See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	bind9@1:9.18.18-0ubuntu0.22.04.1	1:9.18.30-0ubuntu0.22.04.2

Open the chart page →

5,841

preparationsvtech-public-helm-charts

1 of 1 See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	bind9@1:9.18.1-1ubuntu1.1	1:9.18.30-0ubuntu0.22.04.2

Open the chart page →

12,048

rundecksvtech-public-helm-charts

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	bind9@1:9.16.48-0ubuntu0.20.04.1	1:9.18.30-0ubuntu0.20.04.2

Open the chart page →

18,756

syncthingsvtech-public-helm-charts

1 of 2 See more

syncthing svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_syncthing :v1.0.4	1a75d88031fe	bind@9.18.19-r1	9.18.33-r0

Open the chart page →

2,336

jupyterhubuninettsigma2

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	bind9@1:9.16.33-1~deb11u1	1:9.16.50-1~deb11u3

Open the chart page →

8,607

longhornwenerme

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2

Open the chart page →

15,230

Container images carrying it

103 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/openshift/origin-cli :4.6	6722d5041b47	bind@32:9.11.13-6.el8_2.4	32:9.11.36-16.el8_10.4	1
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	bind@32:9.11.36-3.el8_6.5	32:9.11.36-16.el8_10.4	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	bind@32:9.11.26-4.el8_4	32:9.11.36-16.el8_10.4	1