CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.1; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,401; of 17,821 indexed, latest versions
Container images: 2,733; deployed by those charts
Fix available: 2 of 5; affected packages

openssl - security update

Carried by container images the latest versions of 2,401 of 17,821 indexed charts deploy, on 2,733 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more	1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more	1,799
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more	933
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	no fix listed	21
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5
edk2deb	2022.11-6+deb12u2	no fix listed	1

OSV records: ALPINE-CVE-2024-13176 CGA-82rc-p89h-xq36 DEBIAN-CVE-2024-13176 UBUNTU-CVE-2024-13176 DLA-4176-1
Also known as: CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,401 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,966

Container images carrying it

2,733 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nginx :1.25.4-alpine	31bad00311cb	openssl@3.1.4-r5	3.1.8-r0	1
library/nginx :1.23.0	3536d368b898	openssl@1.1.1n-0+deb11u2	1.1.1w-0+deb11u3	1
library/nginx :1.25.1	67f9a4f10d14	openssl@3.0.9-1	3.0.16-1~deb12u1	1
library/nginx :1.25.4	9ff236ed47fe	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
library/nginx :1.23.2	ab589a3c466e	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
library/nginx :1.23.3	f4e3b6489888	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
library/nginx :1.23	f5747a42e3ad	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
library/nginx :1.27.3	fb197595ebe7	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
library/php :7.3-apache	b9872cd287ef	openssl@1.1.1k-1+deb11u2	1.1.1w-0+deb11u3	1
library/postgres :13.7	03652c675ae1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
library/postgres :14.3	2d1e636f0778	openssl@1.1.1n-0+deb11u2	1.1.1w-0+deb11u3	1
library/postgres :17.4	304ab8135187	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
library/postgres :12.14-alpine3.17	4b100eafe128	openssl@3.0.8-r3	3.0.19-r0	1
library/postgres :16.6	557fea37a744	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
library/postgres :13.11-bullseye	5c265bf1fd30	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u3	1
library/postgres :12.15-alpine	73ea9cdd4a9d	openssl@3.1.2-r0	3.1.8-r0	1
library/postgres :12-alpine	7c8f48705831	openssl@3.3.2-r4	3.3.2-r5	1
library/postgres :17.2-alpine	7e5df973a748	openssl@3.3.2-r4	3.3.2-r5	1
library/postgres :15.3	8775adb39f0d	openssl@3.0.9-1	3.0.16-1~deb12u1	1
library/postgres :16.2-alpine	951bfda46030	openssl@3.1.4-r5	3.1.8-r0	1
library/postgres :13.12	ced3ba927f4c	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
library/postgres :14.0	db927beee892	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u3	1
library/postgres :15.3-alpine3.17	f3e018bec283	openssl@3.0.10-r0	3.0.19-r0	1
library/postgres :14.6	f565573d74ae	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
library/python :3.8-alpine	3d93b1f77efc	openssl@3.3.2-r0	3.3.2-r2	1
library/python :3.8	d41127070014	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1	1
library/python :3.12.9-bullseye	ed4450bab88f	openssl@1.1.1w-0+deb11u2	1.1.1w-0+deb11u3	1
library/rabbitmq :3.12.10	0742852455ad	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.19	1
library/rabbitmq :3.12-management-alpine	0b44fbcc3a4b	openssl@3.3.2-r0	3.3.2-r2	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24	1
library/rabbitmq :3.13.1-alpine	4bcec9fde55c	openssl@3.1.4-r5	3.1.8-r0	1
library/rabbitmq :3.12-alpine	97907aceae0a	openssl@3.3.2-r0	3.3.2-r2	1
library/rabbitmq :3.13.0-alpine	b4abd8d41c68	openssl@3.1.4-r5	3.1.8-r0	1
library/rabbitmq :3.7-management	b6dd45cc35b3	openssl@1.1.1-1ubuntu2.1~18.04.6	no fix listed	1
library/redis :7.0.4	091a7b5de688	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
library/redis :6.0.16-alpine	0f0e2fa71653	openssl@3.0.7-r2	3.0.19-r0	1
library/redis :7.0.15	352c1fdadc91	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1	1
library/redis :7-bullseye	6a5130174e14	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u3	1
library/redis :7.2.5-alpine	6aaf3f5e6bc8	openssl@3.3.2-r0	3.3.2-r2	1
library/redis :7.0.10	92b8b307ee28	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
library/redis :7.4.1	bb142a9c18ac	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
library/redis :7.4.1-alpine	c1e88455c852	openssl@3.3.2-r1	3.3.2-r2	1
library/redis :7.0-alpine	c9d92d840fd0	openssl@3.3.2-r0	3.3.2-r2	1
library/solr :8.7.0	d124efd81fbb	openssl@1.1.1n-0+deb11u1	1.1.1w-0+deb11u3	1
library/sonarqube :10.7.0-community	0842dcd4c8f8	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.19	1
library/sonarqube :10.0.0-community	ef9723cf4fe4	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.19	1
library/storm :2.4.0	bd5d420506d6	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
library/telegraf :1.20.4	28e98eece020	openssl@1.1.1n-0+deb11u2	1.1.1w-0+deb11u3	1
library/telegraf :1.27	507a3eecf809	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
library/traefik :v2.11.0	0a5157f742d2	openssl@3.1.4-r5	3.1.8-r0	1