CVE-2024-2398

High

Advisory

Published 27 Mar 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.6; base score, highest
EPSS: 0.361; 98th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 876; of 17,790 indexed, latest versions
Container images: 838; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: curl security update

Carried by container images the latest versions of 876 of 17,790 indexed charts deploy, on 838 images.

Affected package	Affected versions	Fixed in	Images
curldeb	7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6, 7.47.0-1ubuntu2.7+56 more	7.47.0-1ubuntu2.19+esm12, 7.58.0-2ubuntu3.24+esm4, 7.68.0-1ubuntu2.22, 7.81.0-1ubuntu1.16+1 more	451
curlapk	7.86.0-r1, 7.87.0-r0, 7.87.0-r1, 7.87.0-r2+12 more	8.7.1-r0	187
curlrpm	7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+26 more	0:7.61.1-34.el8_10.2, 0:7.76.1-23.el9_2.7, 0:7.76.1-29.el9_4.1	200

OSV records: ALPINE-CVE-2024-2398 DEBIAN-CVE-2024-2398 RHSA-2024:3998 RHSA-2024:5529 RHSA-2024:5654 RLSA-2024:5654 UBUNTU-CVE-2024-2398
Also known as: USN-6718-1, USN-6718-2

Charts affected

876 by stars

Chart

Latest

Affected images

Radar Score

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.22

Open the chart page →

11,448

wallarm-ingress-rcwallarm

4.8.4

1 of 2 See more

wallarm-ingress-rc wallarm 4.8.4

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
wallarm/ingress-controller :4.8.0-1	a591b9c91570	curl@8.4.0-r0	8.7.1-r0

Open the chart page →

2,635

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.22
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm4

Open the chart page →

20,242

consulwarjiang

1.3.0

1 of 2 See more

consul warjiang 1.3.0

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.17.0	712fe02d2f84	curl@8.4.0-r0	8.7.1-r0

Open the chart page →

4,072

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.22

Open the chart page →

11,171

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.16

Open the chart page →

6,282

supersetwbstack

0.1.0

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u6

Open the chart page →

7,166

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.24+esm4

Open the chart page →

9,752

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.22

Open the chart page →

9,252

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.22

Open the chart page →

9,252

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	curl@7.88.1-10	7.88.1-10+deb12u6

Open the chart page →

10,111

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.2

Open the chart page →

28,697

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	curl@7.87.0-r2	8.7.1-r0

Open the chart page →

2,031

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.24+esm4

Open the chart page →

10,859

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.22

Open the chart page →

15,288

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	curl@7.61.1-14.el8_3.1	0:7.61.1-34.el8_10.2

Open the chart page →

6,922

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	curl@7.61.1-22.el8	0:7.61.1-34.el8_10.2

Open the chart page →

6,144

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.16

Open the chart page →

9,320

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u6

Open the chart page →

5,559

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	curl@7.61.1-22.el8	0:7.61.1-34.el8_10.2

Open the chart page →

11,603

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u6

Open the chart page →

7,697

prometheusalertygqygq2

1.0.0

1 of 1 See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
feiyu563/prometheus-alert :v4.9.1	224cfa68cbd9	curl@8.5.0-r0	8.7.1-r0

Open the chart page →

1,610

zahori-consulzahori

1.0.1

1 of 2 See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	curl@8.1.2-r0	8.7.1-r0

Open the chart page →

5,047

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	curl@7.61.1-25.el8_7.1	0:7.61.1-34.el8_10.2

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	curl@7.61.1-25.el8_7.3	0:7.61.1-34.el8_10.2

Open the chart page →

3,697

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	curl@8.5.0-r0	8.7.1-r0

Open the chart page →

1,588

Container images carrying it

838 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.22	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.22	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.22	1
ghcr.io/tasmoadmin/tasmoadmin :v3.3.2	05aeefbdac2b	curl@8.5.0-r0	8.7.1-r0	1
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u6	1
ghcr.io/vshn/stardog-userrole-operator :v0.3.0	4774237c9e86	curl@8.5.0-r0	8.7.1-r0	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u6	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.24+esm4	1
ghcr.io/zazuko/blueprint :v0.1.0	92ac2f97978e	curl@8.5.0-r0	8.7.1-r0	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u6	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u6	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u6	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm4	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.22	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u6	1
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	curl@7.61.1-33.el8	0:7.61.1-34.el8_10.2	1
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	curl@7.61.1-33.el8	0:7.61.1-34.el8_10.2	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.16	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	curl@7.81.0-1ubuntu1.14	7.81.0-1ubuntu1.16	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.2	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	curl@7.61.1-30.el8_8.2	0:7.61.1-34.el8_10.2	1
quay.io/ctrontesting/iofog-controller :latest	10df27bc5560	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.2	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.2	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	curl@7.58.0-2ubuntu3.20	7.58.0-2ubuntu3.24+esm4	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.16	1
quay.io/fairwinds/docker-demo :1.4.0	d53cb940196c	curl@8.1.0-r0	8.7.1-r0	1
quay.io/fiware/apollo :0.0.10	55330b1b60c1	curl@7.61.1-22.el8	0:7.61.1-34.el8_10.2	1
quay.io/fiware/canis-major :1.5.15	bb40472e4ff5	curl@7.61.1-22.el8	0:7.61.1-34.el8_10.2	1
quay.io/fiware/endpoint-configuration-service :0.4.3	0dc38a87b844	curl@7.61.1-22.el8	0:7.61.1-34.el8_10.2	1
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	curl@7.61.1-18.el8_4.2	0:7.61.1-34.el8_10.2	1
quay.io/fiware/trusted-issuers-registry :0.11.1	a8a9ec461034	curl@7.61.1-22.el8	0:7.61.1-34.el8_10.2	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.16	1
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	curl@7.61.1-25.el8_7.1	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	curl@7.61.1-25.el8_7.1	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/osm-edge-crds-ubi8 :1.2.1	c3bc5e7a70e6	curl@7.61.1-25.el8_7.1	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	curl@7.61.1-25.el8_7.1	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	curl@7.61.1-25.el8_7.1	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/pipy-repo-ubi8 :0.70.0-46	9912fdf6c183	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/pipy-ubi8 :0.50.0-88	24352dca6672	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/pipy-ubi8 :0.70.0-46	35d87a381432	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.2	1
quay.io/flomesh/toolbox-ubi8 :1.2.0	1f5e3161cb84	curl@7.61.1-34.el8	0:7.61.1-34.el8_10.2	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	curl@7.61.1-12.el8	0:7.61.1-34.el8_10.2	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.2	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	curl@7.61.1-25.el8	0:7.61.1-34.el8_10.2	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	curl@7.61.1-25.el8_7.1	0:7.61.1-34.el8_10.2	1
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	curl@7.61.1-22.el8_6.4	0:7.61.1-34.el8_10.2	1