StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,400
of 17,828 indexed, latest versions
Container images
2,724
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,400 of 17,828 indexed charts deploy, on 2,724 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,792
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more931
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed20
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,400 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,724 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
calltelemetry/web:0.6.7457a7e353542
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
camerahub/camerahub:0.36.23a5af37dd6e1b
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
camunda/zeebe:8.4.5ab5abc09e407
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.19
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
carlosmz87/test_helm_frontend:latest79f4b528f42a
openssl@3.3.2-r1
3.3.2-r2
1
casbin/casdoor:v1.224.066f836ef778b
openssl@3.0.7-r2
3.0.19-r0
1
casbin/casdoor:v1.753.0770ad9ec3190
openssl@3.3.2-r0
3.3.2-r2
1
castopod/castopod:1.12.101fd37280cbb2
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
catalysm/csmm:latestf003b35f54d9
openssl@3.1.2-r0
3.1.8-r0
1
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24
1
cgtysylr/cluster-octopus:1.0.0aec0f8a38a77
openssl@3.1.7-r1
3.1.8-r0
1
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
chandanteekinavar/findery-market-payment-service:1.0c96f759b6ce4
openssl@3.1.2-r0
3.1.8-r0
1
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
openssl@1.1.1w-0+deb11u2
1.1.1w-0+deb11u3
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
openssl@3.0.2-0ubuntu1.23
no fix listed
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
openssl@1.0.1f-1ubuntu2.27
no fix listed
1
chetangautamm/repo:sipp.v3e7f7049e1544
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24
1
cheveo/azp-agent:1.0.282240f890884
openssl@3.0.2-0ubuntu1.19
no fix listed
1
cheyang/distributed-tf:1.6.046cc34755493
openssl@1.0.2g-1ubuntu4.10
no fix listed
1
chirpstack/chirpstack-application-server:3fb7667fe037f
openssl@3.0.7-r0
3.0.19-r0
1
chirpstack/chirpstack-network-server:3c0bbbb7a3f1e
openssl@3.0.7-r0
3.0.19-r0
1
chriseaton/adventureworks:latest54c3384ce701
openssl@3.0.2-0ubuntu1.19
no fix listed
1
chrisfu/docker-wipeout-rewrite:sha-0c4f0614f8b4996a203d
openssl@3.1.2-r0
3.1.8-r0
1
chrislusf/seaweedfs:3.64634b094b2183
openssl@3.1.4-r5
3.1.8-r0
1
chrislusf/seaweedfs:3.56ed80f00fde46
openssl@3.1.2-r0
3.1.8-r0
1
christianhuth/node-hostname:1.0.1c07f414a3e4b
openssl@3.3.2-r4
3.3.2-r5
1
chriswells0/first-mate:1.0.5f3918ec8471c
openssl@3.1.1-r1
3.1.8-r0
1
chubaofs/cfs-client:3.2.015ff74209ce7
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
chubaofs/cfs-server:3.2.0205030e045f2
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
circleci/container-agent:34d8d0ae5efc3
openssl@3.0.8-r3
3.0.19-r0
1
circleci/runner:launch-agent9bdc62f02162
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24
1
ciscolabs/msm-nc:0710202336d02faad958
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.19
1
citizenstig/httpbin:latestb81c818ccb86
openssl@1.0.2g-1ubuntu4.5
no fix listed
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
openssl@3.0.2-0ubuntu1.23
no fix listed
1
clickhouse/clickhouse-server:24.81ffa82edee00
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24
1
clickhouse/clickhouse-server:24.4.12e6587b81a26
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24
1
clickhouse/clickhouse-server:23.8512bb8a21483
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24
1
clickhouse/clickhouse-server:26.3810861a2e2d0
openssl@3.0.2-0ubuntu1.29
no fix listed
1
clickhouse/clickhouse-server:26.584d05b9c205e
openssl@3.0.2-0ubuntu1.26
no fix listed
1
clickhouse/clickhouse-server:25.3.2.398745843b17f9
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
1
clickhouse/clickhouse-server:26.3.1092098d3b31dd
openssl@3.0.2-0ubuntu1.23
no fix listed
1
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
1
clickhouse/clickhouse-server:latesta73b5c0fb6f8
openssl@3.0.2-0ubuntu1.29
no fix listed
1
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
openssl@3.0.2-0ubuntu1.21
no fix listed
1
clickhouse/clickhouse-server:26.8.3d73903d1b61d
openssl@3.0.2-0ubuntu1.29
no fix listed
1
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
openssl@3.0.2-0ubuntu1.9
3.0.2-0ubuntu1.19
1
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
openssl@3.0.2-0ubuntu1.20
no fix listed
1
cloudflare/cloudflared:2024.8.314d9c6b01b29
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
cloudflare/cloudflared:2024.5.05d5f70a59d5e
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
cloudflare/cloudflared:2024.11.1665dda65335e
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.