StackRadar

CVE-2024-2236

Medium

Advisory

Published 6 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,140
of 17,792 indexed, latest versions
Container images
2,109
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 2,140 of 17,792 indexed charts deploy, on 2,109 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+23 more1.9.4-3ubuntu3.3, 1.10.3-2ubuntu0.2, 1.12.0-2ubuntu1.12,065
libgcryptrpm1.8.2-lp151.9.4.1, 1.10.0-8.el9_0, 1.10.0-10.el9_2, 1.11.1-160000.2.20:1.10.0-11.el9, 1.11.1-2.1, 1.12.1-160000.1.137
libgcrypt11deb1.5.3-2ubuntu4.1, 1.5.3-2ubuntu4.5, 1.5.3-2ubuntu4.6no fix listed7
libgpg-errorrpm1.54-160000.2.21.58-160000.1.11
OSV records
DEBIAN-CVE-2024-2236RHSA-2024:9404RLSA-2024:9404UBUNTU-CVE-2024-2236openSUSE-SU-2025:15239-1SUSE-FU-2026:21213-1
Also known as
RHSA-2025:3530, RHSA-2025:3534, USN-8711-1

Charts affected

2,140 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,109 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
libgcrypt20@1.10.1-3
no fix listed
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
2
technitium/dns-server:15.4.0df7d90ef0f7b
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
2
uffizzi/controller:latest0344805f267b
libgcrypt20@1.10.1-3
no fix listed
2
vdiogov/glpi-conteiner:latest6945f84f0058
libgcrypt20@1.10.1-3
no fix listed
2
wolveix/satisfactory-server:latest:v1.9.10e103700ae6ae
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
2
wurstmeister/zookeeper:latest7a7fd44a7210
libgcrypt11@1.5.3-2ubuntu4.1
no fix listed
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
libgcrypt20@1.6.5-2ubuntu0.3
no fix listed
2
ghcr.io/api7/adc:0.27.1f65f53dd9668
libgcrypt20@1.10.1-3+deb12u1
no fix listed
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
2
ghcr.io/astriaorg/conductor:latest3ea8164b0eae
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
libgcrypt20@1.10.3-2ubuntu0.2
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
libgcrypt20@1.10.1-3+deb12u1
no fix listed
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
libgcrypt20@1.8.5-5ubuntu1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libgcrypt20@1.8.5-5ubuntu1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
libgcrypt20@1.8.5-5ubuntu1
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
libgcrypt20@1.10.1-3+deb12u1
no fix listed
2
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.1392bd6c526c50
libgcrypt20@1.10.3-2ubuntu0.2
no fix listed
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.3
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
libgcrypt20@1.10.1-3
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
libgcrypt20@1.10.1-3
no fix listed
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2:latestb53a854bd7c1
libgcrypt20@1.10.3-2ubuntu0.1
1.10.3-2ubuntu0.2
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
2
quay.io/cilium/cilium-envoy:v1.37.6-1789133542-cbec91f666af0bf742da986d43832932dbb26b82af7382699576
libgcrypt20@1.10.3-2ubuntu0.2
no fix listed
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
libgcrypt20@1.10.1-3+deb12u1
no fix listed
2
1dev/server:11.9.0cd5b12fe5471
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.2
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
libgcrypt20@1.10.1-3
no fix listed
1
5200710/hadoop:3.2.3-java8092d3088a5fb
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
libgcrypt20@1.8.1-4ubuntu1.1
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
libgcrypt20@1.10.1-3
no fix listed
1
actualbudget/actual-server:25.3.158fecd9088b7
libgcrypt20@1.10.1-3
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.