StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,452
of 17,837 indexed, latest versions
Container images
2,770
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,452 of 17,837 indexed charts deploy, on 2,770 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,825
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more944
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed20
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,452 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24

Open the chart page →

9,357
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

8,128

Container images carrying it

2,770 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
haproxytech/haproxy-alpine:2.8.08951be4b4e1c
openssl@3.1.1-r1
3.1.8-r0
1
haproxytech/kubernetes-ingress:1.11.4c5f8a41ef0d4
openssl@3.1.4-r5
3.1.8-r0
1
hashicorp/boundary:0.15.3339b78b61750
openssl@3.1.4-r5
3.1.8-r0
1
hashicorp/consul:1.17.0712fe02d2f84
openssl@3.1.4-r0
3.1.8-r0
1
hashicorp/consul:1.15.3ddff34041c5c
openssl@3.0.9-r1
3.0.19-r0
1
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
openssl@3.1.4-r0
3.1.8-r0
1
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
openssl@3.0.9-r1
3.0.19-r0
1
hashicorp/terraform:1.44dcb45513699
openssl@3.1.2-r0
3.1.8-r0
1
hashicorp/terraform:1.9.7b77efab1a448
openssl@3.3.2-r0
3.3.2-r2
1
hashicorp/vault:1.15.40b01ed3924e6
openssl@3.1.4-r1
3.1.8-r0
1
hashicorp/vault-k8s:1.2.14500e988b7ce
openssl@3.0.8-r3
3.0.19-r0
1
hashicorp/waypoint:0.11.397d521a27498
openssl@3.0.7-r0
3.0.19-r0
1
hassroutyyoussef/accountservice:latest1f01edf1ee0c
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
hassroutyyoussef/orderservice:latest2fc3d1617928
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
hassroutyyoussef/userservice:lateste0392e2b4a90
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
hasura/graphql-engine:v2.34.0-ce0111b0204136
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.19
1
hasura/graphql-engine:v2.48.10f6c1c4b957d2
openssl@3.0.2-0ubuntu1.19
no fix listed
1
haugene/transmission-openvpn:4.0059216cfae4b
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24
1
haveagitgat/tdarr:2.00.181256348872ce
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
hazegoodlife/haaze:milksite8d4c63169e14
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
hazelcast/hazelcast:5.3.18fe26efde8e1
openssl@3.1.2-r0
3.1.8-r0
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
headscale/headscale:0.25.1a7a8ae9616bb
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
headwindmdm/hmdm:0.1.93550b4840840
openssl@3.0.2-0ubuntu1.26
no fix listed
1
healthchecks/healthchecks:v2.8.1e82bb0836e30
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
1
hecrom/myweathergatewayservice:1.3.1192e5588d55f3
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
openssl@3.3.1-r3
3.3.2-r2
1
hecrom/myweatherprocessingservice:1.3.11203ee6853a27
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
hecrom/myweatherservice:1.3.11c502a4b758f0
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
helga09/php_shoes_ukr:v1.1.1e283539bcb8c
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
openssl@3.0.9-1
3.0.16-1~deb12u1
1
hetznercloud/hcloud-cloud-controller-manager:v1.16.08c07e6d7a76c
openssl@3.1.1-r1
3.1.8-r0
1
heywood8/redisinsight:2.28.00bc9ab313d37
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
hfoxy4/kubefaas-builder:main-2afc7570bfb65aaad93
openssl@3.3.1-r0
3.3.2-r2
1
hfoxy4/kubefaas-controller:main-2afc7570761fe08f14c
openssl@3.3.1-r0
3.3.2-r2
1
hiboxsystems/marge-bot:0.11.07235809b43b3
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
hiboxsystems/marge-bot:0.12.1a96c10b61a59
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
hiboxsystems/marge-bot:0.14.0dcffb926e563
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
hiett/serverless-redis-http:0.0.1065128347949b
openssl@3.0.12-r5
3.0.19-r0
1
hivemq/hivemq4:dns-4.5.144d194450d48e
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.19
1
hiversh/gateway:0.1.45839226cc6e41
openssl@3.0.2-0ubuntu1.20
no fix listed
1
hjacobs/kube-downscaler:23.2.05d328c003efe
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
openssl@3.0.9-1
3.0.16-1~deb12u1
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.