CVE-2024-21096

Medium

Advisory

Published 16 Apr 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.9; base score, highest
EPSS: 0.004; 36th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 163; of 17,781 indexed, latest versions
Container images: 178; deployed by those charts
Fix available: 8 of 12; affected packages

mariadb-10.5 - security update

Carried by container images the latest versions of 163 of 17,781 indexed charts deploy, on 178 images.

Affected package	Affected versions	Fixed in	Images
mariadbdeb	1:10.11.3-1, 1:10.11.4-1~deb12u1, 1:10.11.6-0+deb12u1, 1:10.11.7+maria~deb12+2 more	1:10.11.11-0+deb12u1	60
mysql-8.0deb	8.0.23-0ubuntu0.20.04.1, 8.0.25-0ubuntu0.20.04.1, 8.0.26-0ubuntu0.20.04.2, 8.0.26-0ubuntu0.20.04.3+13 more	8.0.37-0ubuntu0.20.04.3, 8.0.37-0ubuntu0.22.04.3, 8.0.37-0ubuntu0.24.04.1	34
mariadbapk	10.11.4-r0, 10.11.5-r0, 10.11.5-r3, 10.11.6-r0	10.11.8-r0, 10.11.11-r0	11
mysql-5.7deb	5.7.20-0ubuntu0.16.04.1, 5.7.29-0ubuntu0.18.04.1, 5.7.32-0ubuntu0.18.04.1, 5.7.33-0ubuntu0.18.04.1+2 more	no fix listed	6
mariadbbitnami	10.6.12-2, 10.6.12-3, 10.11.4-1, 11.3.2-5	10.5.25	4
MariaDBbitnami	10.11.4, 11.3.2-5	10.5.25	2
mariadb-10.1deb	1:10.1.47-0ubuntu0.18.04.1, 1:10.1.48-0ubuntu0.18.04.1	no fix listed	2
mysql-5.5deb	5.5.60-0ubuntu0.14.04.1, 5.5.62-0ubuntu0.14.04.1	no fix listed	2
mariadb-10.3deb	1:10.3.34-0ubuntu0.20.04.1	no fix listed	1
mariadb-10.6deb	1:10.6.7-2ubuntu1	1:10.6.18-0ubuntu0.22.04.1	1
mysql-clientbitnami	10.6.11-1	10.5.25	1
mariadb-10.5deb	1:10.5.11-1, 1:10.5.12-0+deb11u1, 1:10.5.15-0+deb11u1, 1:10.5.18-0+deb11u1+2 more	1:10.5.26-0+deb11u2	59

OSV records: ALPINE-CVE-2024-21096 BIT-mariadb-2024-21096 BIT-mysql-client-2024-21096 DEBIAN-CVE-2024-21096 UBUNTU-CVE-2024-21096 DLA-3891-1
Also known as: BIT-mariadb-min-2024-21096, USN-6823-1, USN-6839-1

Charts affected

163 by stars

Chart

Latest

Affected images

Radar Score

temporaltemporal

0.28.9

1 of 13 See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.22.0	836af062af30	mariadb@10.11.4-r0	10.11.8-r0

Open the chart page →

21,005

helm-testtest-helm-artifacthub

1.0.0

1 of 2 See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
carlosmz87/test_helm_backend :latest	8ffa63aa995d	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1

Open the chart page →

11,648

codegentest-opea

1.0.0

1 of 5 See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
opea/codegen-ui :1.0	2bee4eb66f3e	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1

Open the chart page →

28,814

codetranstest-opea

1.0.0

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
opea/codetrans-ui :1.0	3ef121f34610	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1

Open the chart page →

28,385

docsumtest-opea

1.0.0

1 of 5 See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
opea/docsum-ui :1.0	7f854e9bffaf	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1

Open the chart page →

28,858

tfy-distributortruefoundry

0.0.1

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	mariadb@1:10.11.4-1~deb12u1	1:10.11.11-0+deb12u1

Open the chart page →

17,323

opencloudunxwares

0.2.3

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	mysql-8.0@8.0.36-2ubuntu3	8.0.37-0ubuntu0.24.04.1

Open the chart page →

45,239

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	mariadb@1:10.11.3-1	1:10.11.11-0+deb12u1

Open the chart page →

14,358

vinyl-lib-chartvinyl-lib

0.1.0

1 of 1 See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
kporwit/vinyl_lib_app :v0.1.1	217de0302218	mariadb-10.5@1:10.5.15-0+deb11u1	1:10.5.26-0+deb11u2

Open the chart page →

3,392

supersetwbstack

0.1.0

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1

Open the chart page →

7,085

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	mariadb-10.1@1:10.1.48-0ubuntu0.18.04.1 mysql-5.7@5.7.38-0ubuntu0.18.04.1	no fix listed no fix listed

Open the chart page →

9,743

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	mariadb-10.5@1:10.5.15-0+deb11u1	1:10.5.26-0+deb11u2

Open the chart page →

1,585

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-21096.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	mariadb-10.5@1:10.5.18-0+deb11u1	1:10.5.26-0+deb11u2

Open the chart page →

1,838

Container images carrying it

178 by charts deploying them

A fixed version is listed for 8 of the 12 affected packages.

Container image	Digest	Package	Fixed in	Used by
socialmediamacroscope/classification_predict :0.1.2	4fb86885d64d	mariadb-10.5@1:10.5.18-0+deb11u1	1:10.5.26-0+deb11u2	1
socialmediamacroscope/classification_split :0.1.2	4bfda60829fe	mariadb-10.5@1:10.5.18-0+deb11u1	1:10.5.26-0+deb11u2	1
socialmediamacroscope/classification_train :0.1.2	07477060bba8	mariadb-10.5@1:10.5.18-0+deb11u1	1:10.5.26-0+deb11u2	1
socialmediamacroscope/clowder_create_collection :0.1.0	c969f7677983	mariadb-10.5@1:10.5.18-0+deb11u1	1:10.5.26-0+deb11u2	1
socialmediamacroscope/clowder_create_dataset :0.1.0	9b4211832429	mariadb-10.5@1:10.5.18-0+deb11u1	1:10.5.26-0+deb11u2	1
socialmediamacroscope/clowder_create_space :0.1.0	999f2ff2c128	mariadb-10.5@1:10.5.18-0+deb11u1	1:10.5.26-0+deb11u2	1
socialmediamacroscope/clowder_list :0.1.0	51cb17626519	mariadb-10.5@1:10.5.19-0+deb11u2	1:10.5.26-0+deb11u2	1
socialmediamacroscope/clowder_upload_file :0.1.2	74e35f64db68	mariadb-10.5@1:10.5.19-0+deb11u2	1:10.5.26-0+deb11u2	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	mariadb@1:10.11.3-1	1:10.11.11-0+deb12u1	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	mariadb@1:10.11.3-1	1:10.11.11-0+deb12u1	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	mariadb@1:10.11.3-1	1:10.11.11-0+deb12u1	1
socialmediamacroscope/screen_name_prompt :0.1.2	724f3f5702e0	mariadb-10.5@1:10.5.18-0+deb11u1	1:10.5.26-0+deb11u2	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	mariadb@1:10.11.3-1	1:10.11.11-0+deb12u1	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	mysql-8.0@8.0.29-0ubuntu0.20.04.3	8.0.37-0ubuntu0.20.04.3	1
stratospire/activityrelay :0.2.3	a4c34cb01117	mariadb-10.5@1:10.5.15-0+deb11u1	1:10.5.26-0+deb11u2	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1	1
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	mysql-8.0@8.0.36-0ubuntu0.22.04.1	8.0.37-0ubuntu0.22.04.3	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	mysql-8.0@8.0.36-0ubuntu0.20.04.1	8.0.37-0ubuntu0.20.04.3	1
swisscomcloud/esc-vm-scheduler-web :latest	b6639d1a922e	mariadb-10.5@1:10.5.15-0+deb11u1	1:10.5.26-0+deb11u2	1
teknas09/bird-pod :latest	12a1fa85c4aa	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1	1
temporalio/admin-tools :1.22.4	258958fe2ff2	mariadb@10.11.5-r0	10.11.8-r0	1
temporalio/admin-tools :1.22.0	836af062af30	mariadb@10.11.4-r0	10.11.8-r0	1
temporalio/admin-tools :1.25.0-tctl-1.18.1-cli-1.0.0	cda4901bab53	mariadb@10.11.6-r0	10.11.11-r0	1
theradius/loggia :0.4	63ba348546ec	mariadb@1:10.11.4-1~deb12u1	1:10.11.11-0+deb12u1	1
thongngo3301/stakefish :latest	a341af5976e3	mariadb@1:10.11.3-1	1:10.11.11-0+deb12u1	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	mysql-8.0@8.0.32-0ubuntu0.22.04.2	8.0.37-0ubuntu0.22.04.3	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	mysql-8.0@8.0.31-0ubuntu0.22.04.1	8.0.37-0ubuntu0.22.04.3	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	mysql-8.0@8.0.29-0ubuntu0.22.04.2	8.0.37-0ubuntu0.22.04.3	1
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	mariadb@10.11.6-r0	10.11.11-r0	1
tpdock/freeradius :2.2.9	3da600c95a49	mysql-5.7@5.7.20-0ubuntu0.16.04.1	no fix listed	1
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1	1
vaultwarden/server :1.29.1	c2849f8189e4	mariadb-10.5@1:10.5.19-0+deb11u2	1:10.5.26-0+deb11u2	1
vlebediantsev/notes-admin-front :latest	007c6670ff48	mariadb@1:10.11.3-1	1:10.11.11-0+deb12u1	1
vlebediantsev/notes-project-front :latest	945675fd2636	mariadb@1:10.11.3-1	1:10.11.11-0+deb12u1	1
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	mariadb@1:10.11.3-1	1:10.11.11-0+deb12u1	1
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1	1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1	1
youssef11gaber10/deployment-ui-react :latest	ba6853e35c60	mariadb-10.5@1:10.5.15-0+deb11u1	1:10.5.26-0+deb11u2	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	mysql-8.0@8.0.26-0ubuntu0.20.04.3	8.0.37-0ubuntu0.20.04.3	1
zzorica/k8s-mgmt-pod :0.5.2	640ca4de2922	mariadb-10.5@1:10.5.15-0+deb11u1	1:10.5.26-0+deb11u2	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1	1
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	mariadb-10.5@1:10.5.15-0+deb11u1	1:10.5.26-0+deb11u2	1
ghcr.io/0xemma/reddark :main	2a115e991894	mariadb-10.5@1:10.5.19-0+deb11u2	1:10.5.26-0+deb11u2	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1	1
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	mariadb@1:10.11.10+maria~deb12	1:10.11.11-0+deb12u1	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	mariadb@1:10.11.4-1~deb12u1	1:10.11.11-0+deb12u1	1
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	mariadb-10.5@1:10.5.15-0+deb11u1	1:10.5.26-0+deb11u2	1
ghcr.io/graphprotocol/availability-oracle :sha-28312fd	472a25038957	mariadb@1:10.11.6-0+deb12u1	1:10.11.11-0+deb12u1	1
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	mysql-8.0@8.0.30-0ubuntu0.20.04.2	8.0.37-0ubuntu0.20.04.3	1