StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,452
of 17,837 indexed, latest versions
Container images
2,770
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,452 of 17,837 indexed charts deploy, on 2,770 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,825
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more944
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed20
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,452 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24

Open the chart page →

9,357
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

8,128

Container images carrying it

2,770 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
grafana/grafana:10.1.50679e877ba20
openssl@3.1.2-r0
3.1.8-r0
1
grafana/grafana:9.4.71a359d92f40e
openssl@3.0.8-r0
3.0.19-r0
1
grafana/grafana:10.1.11b9ca4bbc4a2
openssl@3.1.2-r0
3.1.8-r0
1
grafana/grafana:9.5.239c849cebccc
openssl@3.0.8-r3
3.0.19-r0
1
grafana/grafana:11.2.2-security-01464eac539793
openssl@3.3.2-r0
3.3.2-r2
1
grafana/grafana:11.5.15781759b3d27
openssl@3.3.2-r0
3.3.2-r2
1
grafana/grafana:10.2.36b5b37eb35bb
openssl@3.1.3-r0
3.1.8-r0
1
grafana/grafana:10.3.38640e5038e83
openssl@3.1.3-r0
3.1.8-r0
1
grafana/grafana:11.5.28b37a2f028f1
openssl@3.3.2-r1
3.3.2-r2
1
grafana/grafana:11.1.3b23b588cf7cb
openssl@3.1.4-r5
3.1.8-r0
1
grafana/grafana:10.4.0f9811e4e687f
openssl@3.1.4-r5
3.1.8-r0
1
grafana/grafana:11.3.1fa801ab6e1ae
openssl@3.3.2-r0
3.3.2-r2
1
grafana/loki:2.9.1035b02acc6765
openssl@3.3.1-r3
3.3.2-r2
1
grafana/loki:2.9.26074e01dbe03
openssl@3.1.2-r0
3.1.8-r0
1
grafana/loki:2.9.66ca6e2cd3b6f
openssl@3.1.4-r5
3.1.8-r0
1
grafana/loki:3.0.0757b5fadf816
openssl@3.1.4-r1
3.1.8-r0
1
grafana/loki-canary:3.0.028d7c00588aa
openssl@3.1.4-r1
3.1.8-r0
1
grafana/loki-canary:3.1.039baf6d67f85
openssl@3.1.4-r1
3.1.8-r0
1
grafana/loki-canary:2.9.24249db29b992
openssl@3.1.2-r0
3.1.8-r0
1
grafana/loki-canary:2.9.6549a40203e97
openssl@3.1.4-r5
3.1.8-r0
1
grafana/mimir:r292-5f018727476e456c738
openssl@3.1.4-r5
3.1.8-r0
1
grafana/oncall:v1.13.11159b6b836fed
openssl@3.3.2-r0
3.3.2-r2
1
grafana/promtail:2.6.1072527b12cdf
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
grafana/promtail:2.9.1063a2e57a5b14
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
grafana/promtail:2.7.0c16c710f7333
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
grafana/promtail:3.0.0d3de3da9431c
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
grafana/rollout-operator:v0.14.03409edfb45c7
openssl@3.1.4-r5
3.1.8-r0
1
grafana/tempo:2.6.0f55a8a1937ff
openssl@3.3.1-r3
3.3.2-r2
1
graphprotocol/graph-node:v0.37.0f4452cdedd68
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
graylog/graylog:6.1.1019de1aff48c2
openssl@3.0.2-0ubuntu1.19
no fix listed
1
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
gresearch/fasttrackml:latest16d1228220fc
openssl@3.1.4-r5
3.1.8-r0
1
gridgain/community:8.9.11d32d182a0e6a
openssl@3.3.2-r0
3.3.2-r2
1
grpl/grapple-cli:0.2.127c00aafee6629
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.5
1
guacamole/guacamole:1.5.50f62f6d17ab3
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.19
1
guacamole/guacd:1.5.538232cae2713
openssl@3.1.4-r1
3.1.8-r0
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
gulacedia/web-dvwa-new:v367b467d961ca
openssl@3.0.9-1
3.0.16-1~deb12u1
1
gustavostingelin/floresta:0.8.082dcb2fbef58
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
gutmensch/podnat-controller:0.5.2566979793fc4
openssl@3.1.4-r5
3.1.8-r0
1
ha33ona/python:test6affdfc644d0
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
hamid2021/nodejs-dockercli:latest429d99890c3c
openssl@3.0.12-r1
3.0.19-r0
1
hamidyousefi93/saam-test:latestc34f071f6ed0
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
openssl@3.3.2-r0
3.3.2-r2
1
hamzaarshad10/querypodpy:1.7154f38e8668e
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
hansehe/graphql-gateway:1.0.458e09540afbc
openssl@3.1.3-r0
3.1.8-r0
1
hansehe/locust:1.1.0bc8e45262bc4
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
haproxytech/haproxy-alpine:2.9.57f3dc8c7e031
openssl@3.1.4-r5
3.1.8-r0
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.