StackRadarChart IndexLive demo

CVE-2024-11187

High

Advisory

Published 29 Jan 2025In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.167; 97th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 106; of 17,781 indexed, latest versions
Container images: 103; deployed by those charts
Fix available: 3 of 5; affected packages

Red Hat Security Advisory: bind security update

Carried by container images the latest versions of 106 of 17,781 indexed charts deploy, on 103 images.

Affected package	Affected versions	Fixed in	Images
bind9deb	1:9.11.3+dfsg-1ubuntu1.1, 1:9.11.3+dfsg-1ubuntu1.12, 1:9.11.3+dfsg-1ubuntu1.13, 1:9.11.3+dfsg-1ubuntu1.14+30 more	1:9.16.50-1~deb11u3, 1:9.18.30-0ubuntu0.20.04.2, 1:9.18.30-0ubuntu0.22.04.2, 1:9.18.30-0ubuntu0.24.04.2+1 more	73
bindapk	9.18.13-r2, 9.18.16-r0, 9.18.19-r0, 9.18.19-r1+3 more	9.18.33-r0	15
bindrpm	32:9.11.13-6.el8_2.4, 32:9.11.26-4.el8_4, 32:9.11.26-4.el8_4.1, 32:9.11.36-3.el8_6.5+7 more	2:9.11.36-16.el8_10.4, 32:9.11.36-8.el8_8.7, 32:9.11.36-16.el8_10.4, 32:9.16.23-18.el9_4.9+1 more	14
bind9-libsdeb	1:9.11.19+dfsg-2.1ubuntu3	no fix listed	1
isc-dhcpdeb	4.3.5-3ubuntu7.1	no fix listed	1

OSV records: ALPINE-CVE-2024-11187 DEBIAN-CVE-2024-11187 RHSA-2025:1666 RHSA-2025:1669 RHSA-2025:1675 RHSA-2025:1681 UBUNTU-CVE-2024-11187 DLA-4050-1 RLSA-2025:1675
Also known as: RHSA-2025:1684, RHSA-2025:1687, RHSA-2025:1691, USN-7241-1

Charts affected

106 by stars

Chart

Latest

Affected images

Radar Score

maxscalesvtech-public-helm-charts

1 of 2 See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	bind9@1:9.18.18-0ubuntu0.22.04.1	1:9.18.30-0ubuntu0.22.04.2

Open the chart page →

5,841

preparationsvtech-public-helm-charts

1 of 1 See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	bind9@1:9.18.1-1ubuntu1.1	1:9.18.30-0ubuntu0.22.04.2

Open the chart page →

12,048

rundecksvtech-public-helm-charts

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	bind9@1:9.16.48-0ubuntu0.20.04.1	1:9.18.30-0ubuntu0.20.04.2

Open the chart page →

18,756

syncthingsvtech-public-helm-charts

1 of 2 See more

syncthing svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_syncthing :v1.0.4	1a75d88031fe	bind@9.18.19-r1	9.18.33-r0

Open the chart page →

2,336

jupyterhubuninettsigma2

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	bind9@1:9.16.33-1~deb11u1	1:9.16.50-1~deb11u3

Open the chart page →

8,607

longhornwenerme

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-11187.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2

Open the chart page →

15,230

Container images carrying it

103 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	bind9@1:9.18.1-1ubuntu1.3	1:9.18.30-0ubuntu0.22.04.2	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	bind@32:9.11.36-3.el8_6.5	32:9.11.36-16.el8_10.4	3
gradiant/ueransim :3.2.6	015b30d5fa0f	bind9@1:9.18.30-0ubuntu0.22.04.1	1:9.18.30-0ubuntu0.22.04.2	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	bind9@1:9.11.3+dfsg-1ubuntu1.1	no fix listed	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	bind9@1:9.18.1-1ubuntu1.1	1:9.18.30-0ubuntu0.22.04.2	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	bind9@1:9.11.3+dfsg-1ubuntu1.13 isc-dhcp@4.3.5-3ubuntu7.1	no fix listed no fix listed	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	bind@32:9.11.26-4.el8_4.1	32:9.11.36-16.el8_10.4	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	bind@32:9.11.26-4.el8_4.1	32:9.11.36-16.el8_10.4	2
andrianrf/backoffice :latest	047a7837651e	bind@32:9.11.36-14.el8_10	32:9.11.36-16.el8_10.4	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	bind9@1:9.18.12-0ubuntu0.22.04.2	1:9.18.30-0ubuntu0.22.04.2	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2	1
apachepulsar/pulsar :3.0.7	9c9947de139d	bind9@1:9.18.28-0ubuntu0.22.04.1	1:9.18.30-0ubuntu0.22.04.2	1
apachepulsar/pulsar :2.9.0	d056c89b7131	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2	1
apachepulsar/pulsar :2.8.2	d538416d5afe	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2	1
aristidetm/k8s-hub :3.3.7	ccb516cb8474	bind9@1:9.16.48-1	1:9.16.50-1~deb11u3	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	bind9@1:9.16.37-1~deb11u1	1:9.16.50-1~deb11u3	1
checkmk/check-mk-community :2.5.0p6	c11b422210c4	bind9@1:9.18.39-0ubuntu0.22.04.4	no fix listed	1
codetogether/codetogether :latest	4348c8a38752	bind@32:9.16.23-18.el9_4.1	32:9.16.23-18.el9_4.9	1
datamate/seafile-professional :11.0.20	2dd66b722464	bind9@1:9.18.30-0ubuntu0.22.04.2	no fix listed	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	bind9@1:9.18.24-1	1:9.18.33-1~deb12u2	1
emberstack/sftp :5.1.71	1d81a5df909b	bind9@1:9.16.48-1	1:9.16.50-1~deb11u3	1
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed	1
gethue/hue :4.11.0	11b649636e68	bind9@1:9.16.1-0ubuntu2.11	1:9.18.30-0ubuntu0.20.04.2	1
gethue/hue :latest	7d5c1b9f8a79	bind9@1:9.18.30-0ubuntu0.22.04.2	no fix listed	1
glenndehaan/sunflare-tools :latest	a5b3f1dd865d	bind@9.18.16-r0	9.18.33-r0	1
haugene/transmission-openvpn :4.0	059216cfae4b	bind9@1:9.16.1-0ubuntu2.8	1:9.18.30-0ubuntu0.20.04.2	1
heywood8/redisinsight :2.28.0	0bc9ab313d37	bind9@1:9.16.42-1~deb11u1	1:9.16.50-1~deb11u3	1
homeassistant/home-assistant :2023.10.3	021e2afc6e57	bind@9.18.19-r0	9.18.33-r0	1
homeassistant/home-assistant :2023.12.4	8d000332b09b	bind@9.18.19-r0	9.18.33-r0	1
jupyterhub/k8s-hub :3.0.1-0.dev.git.6287.hbfb05cd6	5a0ceed1300a	bind9@1:9.16.42-1~deb11u1	1:9.16.50-1~deb11u3	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	bind9@1:9.16.1-0ubuntu2.4	1:9.18.30-0ubuntu0.20.04.2	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2	1
jupyterhub/k8s-singleuser-sample :3.0.1-0.dev.git.6287.hbfb05cd6	8e4778efec8e	bind9@1:9.16.42-1~deb11u1	1:9.16.50-1~deb11u3	1
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	bind9@1:9.16.1-0ubuntu2.4	1:9.18.30-0ubuntu0.20.04.2	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	bind9@1:9.11.3+dfsg-1ubuntu1.12	no fix listed	1
librenms/librenms :24.11.0	0920bc9117a8	bind@9.18.31-r0	9.18.33-r0	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	bind9@1:9.11.3+dfsg-1ubuntu1.14	no fix listed	1
mariadb/maxscale :23.02.2	56c5e0908148	bind@32:9.11.36-8.el8	2:9.11.36-16.el8_10.4	1
netskopeprivateaccess/publisher_u22 :latest	93e2fd164a93	bind9@1:9.18.39-0ubuntu0.22.04.4	no fix listed	1
networkboot/dhcpd :latest	e99bbfbd6fb2	bind9-libs@1:9.11.19+dfsg-2.1ubuntu3	no fix listed	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	bind9@1:9.18.24-1	1:9.18.33-1~deb12u2	1
omecproject/c3po-hssdb :master-latest	28a90cc26716	bind9@1:9.16.1-0ubuntu2.9	1:9.18.30-0ubuntu0.20.04.2	1
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	bind9@1:9.11.3+dfsg-1ubuntu1.13	no fix listed	1
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	bind9@1:9.11.3+dfsg-1ubuntu1.15	no fix listed	1
openthread/otbr :latest	f307f59f6432	bind9@1:9.11.3+dfsg-1ubuntu1.18	no fix listed	1
pihole/pihole :2023.05.0	b83258064f54	bind9@1:9.16.37-1~deb11u1	1:9.16.50-1~deb11u3	1
razorbladex401/dayz :latest	6a4d79248e7d	bind9@1:9.18.18-0ubuntu0.22.04.2	1:9.18.30-0ubuntu0.22.04.2	1
redislabs/redisinsight :1.14.0	b03ab1426d0d	bind9@1:9.16.37-1~deb11u1	1:9.16.50-1~deb11u3	1
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	bind@9.18.24-r0	9.18.33-r0	1