CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.1; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,451; of 17,832 indexed, latest versions
Container images: 2,775; deployed by those charts
Fix available: 2 of 5; affected packages

openssl - security update

Carried by container images the latest versions of 2,451 of 17,832 indexed charts deploy, on 2,775 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more	1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more	1,828
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more	946
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	no fix listed	20
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5
edk2deb	2022.11-6+deb12u2	no fix listed	1

OSV records: ALPINE-CVE-2024-13176 CGA-82rc-p89h-xq36 DEBIAN-CVE-2024-13176 UBUNTU-CVE-2024-13176 DLA-4176-1
Also known as: CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,451 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

8,128

Container images carrying it

2,775 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/k6v9y5g3/cluster-agent :master.575	36d051110158	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
public.ecr.aws/k6v9y5g3/cluster-agent :cost_k8s_process.576	9e14a72b066d	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	openssl@1.1.1-1ubuntu2.1~18.04.20	no fix listed	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24	1
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u3	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
public.ecr.aws/zinclabs/openobserve :v0.8.1	27f8de509169	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
quay.io/aerokube/jumphost :1.0.1	70fd7c00418d	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.19	1
quay.io/aerokube/keygen :1.0.1	578934444f04	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.19	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.19	1
quay.io/argoproj/argocd :v2.10.7	83c86003b781	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.19	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.19	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.19	1
quay.io/cilium/tetragon :v1.1.0	96fac2482898	openssl@3.1.4-r5	3.1.8-r0	1
quay.io/clustersecret/clustersecret :0.0.14	a9f835d1b241	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
quay.io/ddn/exascaler-csi-file-driver :v2.2.6	fe2e2e5a2751	openssl@3.1.6-r2	3.1.8-r0	1
quay.io/enix/topomatik :1.3.1	d9f0bec83ef0	openssl@3.0.2-0ubuntu1.23	no fix listed	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	openssl@1.1.1-1ubuntu2.1~18.04.20	no fix listed	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.19	1
quay.io/fairwinds/docker-demo :1.4.0	d53cb940196c	openssl@3.1.0-r4	3.1.8-r0	1
quay.io/fiware/dsba-pdp :0.3.2	0cca71497e9e	openssl@3.0.7-r2	3.0.19-r0	1
quay.io/fiware/vcverifier :2.0.1	cd36290dc849	openssl@3.1.0-r4	3.1.8-r0	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.19	1
quay.io/fluentd_elasticsearch/fluentd :v4.2.3	99079df58561	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
quay.io/fossa/postgres :17.2-1	5af45ac79f38	openssl@1.1.1w-0+deb11u2	1.1.1w-0+deb11u3	1
quay.io/frrouting/frr :9.0.2	086acb1278fe	openssl@3.1.4-r1	3.1.8-r0	1
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	openssl@3.1.1-r1	3.1.8-r0	1
quay.io/groundcover/caretta :v0.0.16	ed8f5118e3a4	openssl@3.0.8-r0	3.0.19-r0	1
quay.io/groundcover/victoria-metrics :v1.85.3	80ddeb90d18d	openssl@3.0.7-r0	3.0.19-r0	1
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u3	1
quay.io/jupyterhub/k8s-network-tools :3.3.7	310daf3451e3	openssl@3.1.4-r5	3.1.8-r0	1
quay.io/jupyterhub/k8s-network-tools :3.2.1	e532a2dc4761	openssl@3.1.3-r0	3.1.8-r0	1
quay.io/kiwigrid/k8s-sidecar :1.25.2	cb4c638ffb1f	openssl@3.1.3-r0	3.1.8-r0	1
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	openssl@3.0.12-r4	3.0.19-r0	1
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	openssl@3.0.9-r1	3.0.19-r0	1
quay.io/maxiv/storageclass-router :0.4.1	60725dab588c	openssl@3.1.4-r5	3.1.8-r0	1
quay.io/metallb/controller :v0.14.4	bbef1ee3e7d3	openssl@3.1.4-r5	3.1.8-r0	1
quay.io/metallb/speaker :v0.14.4	37611bde45a2	openssl@3.1.4-r5	3.1.8-r0	1
quay.io/mongodb/farm-intro-backend :0.1	1a9ce0b8fbd4	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u3	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	openssl@1.0.2g-1ubuntu4.17	no fix listed	1
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	openssl@3.0.8-r4	3.0.19-r0	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	openssl@1.0.2g-1ubuntu4.15	no fix listed	1
quay.io/shivering-isles/dovecot :2.3.21	4599ada9aa06	openssl@3.3.1-r3	3.3.2-r2	1
quay.io/snowdrop/spring-boot-rest-http-example :2.7	b1a054613715	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
quay.io/soketi/k8soketi :0.1-18-debian	4cd9ea9434c4	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
quay.io/soketi/soketi :1.6-16-debian	713223456cf1	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u3	1