CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.1; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,451; of 17,832 indexed, latest versions
Container images: 2,775; deployed by those charts
Fix available: 2 of 5; affected packages

openssl - security update

Carried by container images the latest versions of 2,451 of 17,832 indexed charts deploy, on 2,775 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more	1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more	1,828
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more	946
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	no fix listed	20
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5
edk2deb	2022.11-6+deb12u2	no fix listed	1

OSV records: ALPINE-CVE-2024-13176 CGA-82rc-p89h-xq36 DEBIAN-CVE-2024-13176 UBUNTU-CVE-2024-13176 DLA-4176-1
Also known as: CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,451 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

8,128

Container images carrying it

2,775 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nats :2.10.12-alpine	bca70839d953	openssl@3.1.4-r5	3.1.8-r0	1
library/nats :2.9.11-alpine	ccbe811b8575	openssl@3.0.7-r2	3.0.19-r0	1
library/nats :2.9-alpine	d402af4147fc	openssl@3.1.7-r0	3.1.8-r0	1
library/nats :2.9.20-alpine	d6c6ae7df4a0	openssl@3.1.1-r1	3.1.8-r0	1
library/neo4j :4.2.4	348e3f56faa2	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
library/neo4j :4.4.4	3c9fea42bd5a	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
library/neo4j :5.18.1	8f01f7bb053e	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u3	1
library/nginx :1.27.4	09369da6b103	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
library/nginx :1.27.0-alpine3.19	208b70eefac1	openssl@3.1.6-r2	3.1.8-r0	1
library/nginx :1.25.5-alpine-slim	22414422d1ba	openssl@3.1.4-r6	3.1.8-r0	1
library/nginx :1.25.4-alpine	31bad00311cb	openssl@3.1.4-r5	3.1.8-r0	1
library/nginx :1.23.0	3536d368b898	openssl@1.1.1n-0+deb11u2	1.1.1w-0+deb11u3	1
library/nginx :1.25.1	67f9a4f10d14	openssl@3.0.9-1	3.0.16-1~deb12u1	1
library/nginx :1.25.4	9ff236ed47fe	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
library/nginx :1.23.2	ab589a3c466e	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
library/nginx :1.23.3	f4e3b6489888	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
library/nginx :1.23	f5747a42e3ad	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
library/nginx :1.27.3	fb197595ebe7	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
library/php :7.3-apache	b9872cd287ef	openssl@1.1.1k-1+deb11u2	1.1.1w-0+deb11u3	1
library/postgres :13.7	03652c675ae1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
library/postgres :14.3	2d1e636f0778	openssl@1.1.1n-0+deb11u2	1.1.1w-0+deb11u3	1
library/postgres :17.4	304ab8135187	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
library/postgres :12.14-alpine3.17	4b100eafe128	openssl@3.0.8-r3	3.0.19-r0	1
library/postgres :16.6	557fea37a744	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
library/postgres :13.11-bullseye	5c265bf1fd30	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u3	1
library/postgres :12.15-alpine	73ea9cdd4a9d	openssl@3.1.2-r0	3.1.8-r0	1
library/postgres :12-alpine	7c8f48705831	openssl@3.3.2-r4	3.3.2-r5	1
library/postgres :17.2-alpine	7e5df973a748	openssl@3.3.2-r4	3.3.2-r5	1
library/postgres :15.3	8775adb39f0d	openssl@3.0.9-1	3.0.16-1~deb12u1	1
library/postgres :16.2-alpine	951bfda46030	openssl@3.1.4-r5	3.1.8-r0	1
library/postgres :13.12	ced3ba927f4c	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
library/postgres :14.0	db927beee892	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u3	1
library/postgres :15.3-alpine3.17	f3e018bec283	openssl@3.0.10-r0	3.0.19-r0	1
library/postgres :14.6	f565573d74ae	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
library/python :3.8-alpine	3d93b1f77efc	openssl@3.3.2-r0	3.3.2-r2	1
library/python :3.8	d41127070014	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1	1
library/python :3.12.9-bullseye	ed4450bab88f	openssl@1.1.1w-0+deb11u2	1.1.1w-0+deb11u3	1
library/rabbitmq :3.12.10	0742852455ad	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.19	1
library/rabbitmq :3.12-management-alpine	0b44fbcc3a4b	openssl@3.3.2-r0	3.3.2-r2	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24	1
library/rabbitmq :3.13.1-alpine	4bcec9fde55c	openssl@3.1.4-r5	3.1.8-r0	1
library/rabbitmq :3.12-alpine	97907aceae0a	openssl@3.3.2-r0	3.3.2-r2	1
library/rabbitmq :3.13.0-alpine	b4abd8d41c68	openssl@3.1.4-r5	3.1.8-r0	1
library/rabbitmq :3.7-management	b6dd45cc35b3	openssl@1.1.1-1ubuntu2.1~18.04.6	no fix listed	1
library/redis :7.0.4	091a7b5de688	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
library/redis :6.0.16-alpine	0f0e2fa71653	openssl@3.0.7-r2	3.0.19-r0	1
library/redis :7.0.15	352c1fdadc91	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1	1
library/redis :7-bullseye	6a5130174e14	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u3	1
library/redis :7.2.5-alpine	6aaf3f5e6bc8	openssl@3.3.2-r0	3.3.2-r2	1
library/redis :7.0.10	92b8b307ee28	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1