CVE-2024-12088

High

Advisory

Published 9 Jan 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.047; 91st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 73; of 17,781 indexed, latest versions
Container images: 53; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 73 of 17,781 indexed charts deploy, on 53 images.

Affected package	Affected versions	Fixed in	Images
rsyncdeb	3.1.0-2ubuntu0.1, 3.1.0-2ubuntu0.4, 3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2+14 more	3.1.0-2ubuntu0.4+esm1, 3.1.1-3ubuntu1.3+esm3, 3.1.2-2.1ubuntu1.6+esm1, 3.1.3-8ubuntu0.8+3 more	51
rsyncapk	3.2.7-r4	3.4.0-r0	2

OSV records: ALPINE-CVE-2024-12088 DEBIAN-CVE-2024-12088 UBUNTU-CVE-2024-12088
Also known as: USN-7206-1

Charts affected

73 by stars

Chart

Latest

Affected images

Radar Score

oi-slurm-cluster-chartslurm-cluster-chart

0.25.1

1 of 4 See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

1 of the 4 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
library/mariadb :10.10	334b315c10e5	rsync@3.2.7-0ubuntu0.22.04.2	3.2.7-0ubuntu0.22.04.3

Open the chart page →

4,332

slurm-cluster-chartslurm-cluster-chart

0.25.0

1 of 4 See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

1 of the 4 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
library/mariadb :10.10	334b315c10e5	rsync@3.2.7-0ubuntu0.22.04.2	3.2.7-0ubuntu0.22.04.3

Open the chart page →

4,332

aafsmo-helm-chart

6.0.0

1 of 14 See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

25,769

aaismo-helm-chart

6.0.0

1 of 14 See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

25,803

dgbuildersmo-helm-chart

6.0.0

1 of 3 See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

28,470

dmaap-listenersmo-helm-chart

6.0.0

1 of 3 See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

25,769

elasticsearchsmo-helm-chart

6.0.0

1 of 5 See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

24,776

logsmo-helm-chart

6.0.0

1 of 6 See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

29,220

mariadb-initsmo-helm-chart

6.0.0

1 of 2 See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

24,776

msbsmo-helm-chart

6.0.0

1 of 6 See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

27,477

pndasmo-helm-chart

6.0.0

1 of 3 See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

27,477

pombasmo-helm-chart

6.0.0

1 of 17 See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

29,220

portalsmo-helm-chart

6.0.0

1 of 8 See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.0	7daa08b81954	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

27,477

sdcsmo-helm-chart

6.0.0

1 of 14 See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

25,769

sdnc-ansible-serversmo-helm-chart

6.0.0

1 of 3 See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

25,769

sdnc-portalsmo-helm-chart

6.0.0

1 of 3 See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

25,769

sdnc-promsmo-helm-chart

6.0.0

1 of 2 See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

24,776

sdnc-websmo-helm-chart

6.0.0

1 of 3 See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

24,776

ueb-listenersmo-helm-chart

6.0.0

1 of 3 See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
oomk8s/readiness-check :2.0.2	875814cc853d	rsync@3.1.1-3ubuntu1.2	3.1.1-3ubuntu1.3+esm3

Open the chart page →

25,769

nagvissvtech-public-helm-charts

1.0.0

1 of 1 See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	rsync@3.2.7-1	3.2.7-1+deb12u1

Open the chart page →

9,102

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	rsync@3.1.3-8ubuntu0.7	3.1.3-8ubuntu0.8

Open the chart page →

18,756

vehicle-dashboardtest-vehi-dash

0.1.0

1 of 7 See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
dblaci/ubuntu-ssh-rsync :20231020	eea697611af4	rsync@3.2.7-0ubuntu0.22.04.2	3.2.7-0ubuntu0.22.04.3

Open the chart page →

20,270

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-12088.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	rsync@3.2.7-0ubuntu0.22.04.2	3.2.7-0ubuntu0.22.04.3

Open the chart page →

13,459

Container images carrying it

53 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	rsync@3.1.3-8	3.1.3-8ubuntu0.8	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	rsync@3.1.1-3ubuntu1.3	3.1.1-3ubuntu1.3+esm3	1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	rsync@3.2.7-r4	3.4.0-r0	1