StackRadar

CVE-2024-2236

Medium

Advisory

Published 6 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,150
of 17,797 indexed, latest versions
Container images
2,132
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 2,150 of 17,797 indexed charts deploy, on 2,132 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+23 more1.9.4-3ubuntu3.3, 1.10.3-2ubuntu0.2, 1.12.0-2ubuntu1.12,088
libgcryptrpm1.8.2-lp151.9.4.1, 1.10.0-8.el9_0, 1.10.0-10.el9_2, 1.11.1-160000.2.20:1.10.0-11.el9, 1.11.1-2.1, 1.12.1-160000.1.137
libgcrypt11deb1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5, 1.5.3-2ubuntu4.6no fix listed7
libgpg-errorrpm1.54-160000.2.21.58-160000.1.11
OSV records
DEBIAN-CVE-2024-2236RHSA-2024:9404RLSA-2024:9404UBUNTU-CVE-2024-2236openSUSE-SU-2025:15239-1SUSE-FU-2026:21213-1
Also known as
RHSA-2025:3530, RHSA-2025:3534, USN-8711-1

Charts affected

2,150 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,132 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
istio/install-cni:1.29.0ce27c9ce43c8
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
istio/node-agent-k8s:1.2.9268ab879ea51
libgcrypt20@1.6.5-2ubuntu0.5
no fix listed
1
istio/operator:1.10.3655eefa11c84
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
istio/operator:1.12.06cfce8a071b9
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
istio/pilot:1.10.0294ca55bd1cc
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
istio/pilot:1.29.0325156535773
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
istio/pilot:1.23.69c3d6a218181
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
istio/pilot:1.16.0ac0284d75ec9
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
istio/pilot:1.2.9c09319753454
libgcrypt20@1.6.5-2ubuntu0.5
no fix listed
1
istio/pilot:1.17.1ce9d87606701
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
istio/pilot:1.15.2db08d6963975
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
istio/pilot:1.10.3e7e110a421c2
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
istio/pilot:1.29.1f8b0e412ac4a
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
istio/proxyv2:1.2.90c78be035e98
libgcrypt20@1.6.5-2ubuntu0.5
no fix listed
1
istio/proxyv2:1.9.687a9db561d2e
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
istio/proxyv2:1.10.088c6c693e67a
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
istio/ztunnel:1.25.005f3972d80a9
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
itzg/bungeecord:latest1c59f9631f3b
libgcrypt20@1.12.0-2ubuntu1
1.12.0-2ubuntu1.1
1
itzg/minecraft-server:latest8672e335dbef
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2
1
itzg/minecraft-server:2026.9.1e8640538dac5
libgcrypt20@1.10.3-2ubuntu0.2
no fix listed
1
jacobalberty/unifi:v7.1.664a3616625dda
libgcrypt20@1.8.1-4ubuntu1.3
no fix listed
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
libgcrypt20@1.8.1-4ubuntu1.3
no fix listed
1
jacobalberty/unifi:5.10.19c409924e2463
libgcrypt20@1.6.5-2ubuntu0.5
no fix listed
1
jaedb/iris:latest048cfbf58d57
libgcrypt20@1.10.1-3
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
janzo83/serviceexample:latestfb3c4ac36f3e
libgcrypt20@1.10.1-3
no fix listed
1
jbtronics/part-db1:latest5db71f6db59d
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
jedi132000/nextapp:latestdc2a81e92f23
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
libgcrypt20@1.10.1-3
no fix listed
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
libgcrypt20@1.10.1-3
no fix listed
1
jellyfin/jellyfin:10.10.77ae36aab93ef
libgcrypt20@1.10.1-3
no fix listed
1
jellyfin/jellyfin:10.10.696b09723b22f
libgcrypt20@1.10.1-3
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
libgcrypt20@1.10.1-3
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
libgcrypt20@1.10.1-3
no fix listed
1
jhipster/jhipster-registry:latest7184525acd4d
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
libgcrypt20@1.10.1-3
no fix listed
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
libgcrypt20@1.10.1-3
no fix listed
1
jmferrer/azure-devops-agent:latest030f68ec6998
libgcrypt20@1.6.5-2ubuntu0.6
no fix listed
1
johly/airtrail:v3.11.19f702b91e0e7
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
joplin/server:latest3f7b852959aa
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
libgcrypt20@1.10.1-3+deb12u1
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
libgcrypt20@1.10.1-3
no fix listed
1
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
libgcrypt20@1.10.1-3
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
libgcrypt20@1.8.5-5ubuntu1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.