StackRadar

CVE-2024-2236

Medium

Advisory

Published 6 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,150
of 17,797 indexed, latest versions
Container images
2,132
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 2,150 of 17,797 indexed charts deploy, on 2,132 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+23 more1.9.4-3ubuntu3.3, 1.10.3-2ubuntu0.2, 1.12.0-2ubuntu1.12,088
libgcryptrpm1.8.2-lp151.9.4.1, 1.10.0-8.el9_0, 1.10.0-10.el9_2, 1.11.1-160000.2.20:1.10.0-11.el9, 1.11.1-2.1, 1.12.1-160000.1.137
libgcrypt11deb1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5, 1.5.3-2ubuntu4.6no fix listed7
libgpg-errorrpm1.54-160000.2.21.58-160000.1.11
OSV records
DEBIAN-CVE-2024-2236RHSA-2024:9404RLSA-2024:9404UBUNTU-CVE-2024-2236openSUSE-SU-2025:15239-1SUSE-FU-2026:21213-1
Also known as
RHSA-2025:3530, RHSA-2025:3534, USN-8711-1

Charts affected

2,150 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,132 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
libgcrypt20@1.10.1-3
no fix listed
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
libgcrypt20@1.10.1-3
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
libgcrypt20@1.10.1-3
no fix listed
1
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
defactops/defactops-backend:1.0.2307b663c0092a
libgcrypt20@1.10.1-3
no fix listed
1
defectdojo/defectdojo-django:3.3.100c597abdbb535
libgcrypt20@1.11.0-7+deb13u1
no fix listed
1
dellcloud/category:distributed02fc234353a9
libgcrypt20@1.8.5-5ubuntu1
no fix listed
1
dellcloud/pages:1.04d2eb25b9225
libgcrypt20@1.8.5-5ubuntu1
no fix listed
1
dessalines/lemmy:0.19.2079e9f02c286c
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
devopsgoofy/k8s-platform:latestad865312099f
libgcrypt20@1.10.1-3
no fix listed
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
libgcrypt20@1.10.1-3
no fix listed
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
diygod/rsshub:2025-11-097a6312cac0d5
libgcrypt20@1.10.1-3
no fix listed
1
djjudas21/alertify:0.1.0ba22be670c37
libgcrypt20@1.10.1-3
no fix listed
1
dniel/api-posts:master45a667852f2a
libgcrypt20@1.8.1-4ubuntu1.1
no fix listed
1
dobtc/bitcoin:25.1a870f7cb1105
libgcrypt20@1.10.1-3
no fix listed
1
dolibarr/dolibarr:24.0.069ec52e3b7ef
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
libgcrypt20@1.10.1-3
no fix listed
1
domainmod/domainmod:4.23.04017bfe4c597
libgcrypt20@1.10.1-3
no fix listed
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
dragonflyoss/client:v1.5.59fe2a1d6206f
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
libgcrypt20@1.10.1-3
no fix listed
1
dremio/dremio-oss:24.1.080ed2e3b7c43
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
drorivry4/rego:lateste035d49b15ca
libgcrypt20@1.10.1-3
no fix listed
1
drpcorg/dshackle:0.54.08858fae1859d
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
drumsergio/genieacs:1.2.16.028244054e1bf
libgcrypt20@1.10.1-3
no fix listed
1
dserio83/velero-api:0.3.16b3d9115fee2
libgcrypt20@1.10.1-3
no fix listed
1
dserio83/velero-watchdog:0.1.8d5deae589229
libgcrypt20@1.10.1-3
no fix listed
1
duck1123/cert-downloader:latest0e29f19fa67c
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
duck1123/lnd-fileserver:latest9d6fb247b714
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
dzikoysk/reposilite:3.6.390de4c8e6c0e
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2
1
eceasy/cli-proxy-api:v7.3.3f9abbf3fa5fe
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libgcrypt20@1.11.0-7
no fix listed
1
eclipseaerios/self-orchestrator:1.2.08b123bec5679
libgcrypt20@1.10.1-3
no fix listed
1
eginnovations/agent:7.5.4e4dfe242fe9f
libgcrypt20@1.11.0-7ubuntu0.1
no fix listed
1
elastic/apm-server:7.17.6c7a1c63257d0
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
elastictranscoder/media:627e21dc963ab3858c6b
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
elastictranscoder/media-storage:f6d861a026208b8c2359
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
elastiflow/flow-collector:7.26.0fee67842e16b
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2
1
electriccoinco/lightwalletd:v0.5.42ae3a551e111
libgcrypt20@1.11.0-7+deb13u1
no fix listed
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
emqx/ecp-ui:2.5.1e33e9816f147
libgcrypt20@1.10.1-3
no fix listed
1
enclavenetworks/enclave:latest0a99759300d1
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
engrmth/bnkr:2.1.06d8464e6f0e8
libgcrypt20@1.8.5-5ubuntu1
no fix listed
1
enix/san-iscsi-csi:v4.0.2f963da81ecf7
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.