CVE-2024-21217

Low

Advisory

Published 15 Oct 2024In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.011; 65th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 59; of 17,781 indexed, latest versions
Container images: 53; deployed by those charts
Fix available: 5 of 5; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 59 of 17,781 indexed charts deploy, on 53 images.

Affected package	Affected versions	Fixed in	Images
openjdk-8deb	8u151-b12-0ubuntu0.16.04.2, 8u171-b11-0ubuntu0.16.04.1, 8u191-b12-2ubuntu0.16.04.1, 8u212-b03-0ubuntu1.18.04.1+10 more	8u432-ga~us1-0ubuntu2~16.04.4, 8u432-ga~us1-0ubuntu2~18.04, 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04	20
openjdk-ltsdeb	11.0.3+7-1ubuntu2~18.04.1, 11.0.8+10-0ubuntu1~18.04.1, 11.0.11+9-0ubuntu2~20.04, 11.0.13+8-0ubuntu1~20.04+5 more	11.0.25+9-1ubuntu1~18.04, 11.0.25+9-1ubuntu1~20.04	15
javabitnami	11.0.15-150, 11.0.18-10-1, 11.0.18-10-2, 11.0.20-8-3+10 more	1.8.0	14
Javabitnami	11.0.20-8, 11.0.21-10, 17.0.8-7, 17.0.10-13-1+2 more	1.8.0	7
openjdk-17deb	17.0.3+7-0ubuntu0.20.04.1, 17.0.8+7-1~22.04, 17.0.9+9-1~20.04, 17.0.10+7-1~22.04.1+2 more	17.0.13+11-2~deb12u1, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04	7

OSV records: BIT-java-2024-21217 DEBIAN-CVE-2024-21217 UBUNTU-CVE-2024-21217
Also known as: BIT-java-min-2024-21217, BIT-jre-2024-21217, USN-7096-1, USN-7097-1, USN-7098-1

Charts affected

59 by stars

Chart

Latest

Affected images

Radar Score

cdn-remoteopencord

0.2.4

1 of 3 See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-21217.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	openjdk-8@8u212-b03-0ubuntu1.18.04.1 openjdk-lts@11.0.3+7-1ubuntu2~18.04.1	8u432-ga~us1-0ubuntu2~18.04 11.0.25+9-1ubuntu1~18.04

Open the chart page →

63,223

javareact-java

0.1.0

1 of 1 See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21217.

Container image	Digest	Package	Fixed in
project2team4/react :latest	3ff031a08887	openjdk-lts@11.0.14.1+1-0ubuntu1~20.04	11.0.25+9-1ubuntu1~20.04

Open the chart page →

15,520

zookeepersignoz

0.0.1

1 of 1 See more

zookeeper signoz 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-21217.

Container image	Digest	Package	Fixed in
signoz/zookeeper :3.7.1	fcc4a3288154	java@11.0.20-8-5 Java@11.0.20-8	1.8.0 1.8.0

Open the chart page →

2,917

unifistartechnica

0.1.3

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-21217.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	openjdk-8@8u312-b07-0ubuntu1~18.04	8u432-ga~us1-0ubuntu2~18.04

Open the chart page →

14,493

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-21217.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	openjdk-lts@11.0.19+7~us1-0ubuntu1~20.04.1	11.0.25+9-1ubuntu1~20.04

Open the chart page →

18,756

opencloudunxwares

0.2.3

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-21217.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	openjdk-17@17.0.11+9-1	17.0.13+11-2ubuntu1~24.04

Open the chart page →

45,239

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2024-21217.

Container image	Digest	Package	Fixed in
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	java@11.0.20-8-3 Java@11.0.20-8	1.8.0 1.8.0

Open the chart page →

9,397

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-21217.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.25+9-1ubuntu1~20.04

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-21217.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	openjdk-lts@11.0.11+9-0ubuntu2~20.04	11.0.25+9-1ubuntu1~20.04

Open the chart page →

28,605

Container images carrying it

53 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	openjdk-17@17.0.10+7-1~22.04.1 openjdk-8@8u402-ga-2ubuntu1~22.04	17.0.13+11-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	openjdk-17@17.0.10+7-1~22.04.1 openjdk-8@8u402-ga-2ubuntu1~22.04	17.0.13+11-2ubuntu1~22.04 8u432-ga~us1-0ubuntu2~22.04	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	openjdk-8@8u222-b10-1ubuntu1~16.04.1	8u432-ga~us1-0ubuntu2~16.04.4	1