CVE-2024-2398
HighAdvisory
Published 27 Mar 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.6
- base score, highest
- EPSS
- 0.361
- 98th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 875
- of 17,787 indexed, latest versions
- Container images
- 838
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: curl security update
Carried by container images the latest versions of 875 of 17,787 indexed charts deploy, on 838 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6, 7.47.0-1ubuntu2.7+56 more | 7.47.0-1ubuntu2.19+esm12, 7.58.0-2ubuntu3.24+esm4, 7.68.0-1ubuntu2.22, 7.81.0-1ubuntu1.16+1 more | 451 |
| curlapk | 7.86.0-r1, 7.87.0-r0, 7.87.0-r1, 7.87.0-r2+12 more | 8.7.1-r0 | 187 |
| curlrpm | 7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+26 more | 0:7.61.1-34.el8_10.2, 0:7.76.1-23.el9_2.7, 0:7.76.1-29.el9_4.1 | 200 |
- OSV records
- ALPINE-CVE-2024-2398DEBIAN-CVE-2024-2398RHSA-2024:3998RHSA-2024:5529RHSA-2024:5654RLSA-2024:5654UBUNTU-CVE-2024-2398
- Also known as
- USN-6718-1, USN-6718-2
Charts affected
875 by stars
Container images carrying it
838 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | b940cab56435 | curl | 8.7.1-r0 | 2 |
| ghcr.io/ | 03fd01b4f56e | curl | 7.81.0-1ubuntu1.16 | 2 |
| ghcr.io/ | f04718704dab | curl | 8.7.1-r0 | 2 |
| mcr.microsoft.com/ | 902628a8be89 | curl | 7.68.0-1ubuntu2.22 | 2 |
| quay.io/ | bef31fa5f5f3 | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | 054ef67eb7da | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | 68f9f38c8f30 | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | a784ce6e3b1b | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | ad34abeba912 | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | 6262bc9a2730 | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | 8e5e9490cd50 | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | a0a002cb113c | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | d8c631a6dc43 | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | 464a3af4dfe0 | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | bb5e052770e5 | curl | 0:7.61.1-34.el8_10.2 | 2 |
| quay.io/ | 02f6f143fc6d | curl | 0:7.61.1-34.el8_10.2 | 2 |
| registry.k8s.io/ | 5b161f051d01 | curl | 8.7.1-r0 | 2 |
| registry.k8s.io/ | b3aba22b1da8 | curl | 8.7.1-r0 | 2 |
| 5200710/ | 092d3088a5fb | curl | 7.68.0-1ubuntu2.22 | 1 |
| abdullahkhabir/ | 56526d0cc929 | curl | 8.7.1-r0 | 1 |
| adwerx/ | 840d2b078682 | curl | 7.68.0-1ubuntu2.22 | 1 |
| airsonicadvanced/ | f7cbafac2806 | curl | 7.68.0-1ubuntu2.22 | 1 |
| akaunting/ | 52811b36ec3a | curl | 7.88.1-10+deb12u6 | 1 |
| akeyless/ | 4ba8900a0061 | curl | 0:7.61.1-34.el8_10.2 | 1 |
| allegroai/ | 772827a01bb5 | curl | 7.58.0-2ubuntu3.24+esm4 | 1 |
| alpine/ | 513c4f0d7123 | curl | 8.7.1-r0 | 1 |
| alpine/ | 21b24e6bf801 | curl | 8.7.1-r0 | 1 |
| alpine/ | bd01dae02676 | curl | 8.7.1-r0 | 1 |
| alpine/ | fc059f056ad0 | curl | 8.7.1-r0 | 1 |
| altinity/ | 7a85f522c5bc | curl | 0:7.61.1-34.el8_10.2 | 1 |
| altinity/ | 8f0f582d41f0 | curl | 0:7.61.1-34.el8_10.2 | 1 |
| altinity/ | 1a46d104406d | curl | 0:7.61.1-34.el8_10.2 | 1 |
| anchore/ | bde9eedf639d | curl | 0:7.61.1-34.el8_10.2 | 1 |
| anchore/ | ed9b3badd17c | curl | 0:7.61.1-34.el8_10.2 | 1 |
| andrcuns/ | b4a8eb20581a | curl | 8.7.1-r0 | 1 |
| andrianrf/ | 047a7837651e | curl | 0:7.61.1-34.el8_10.2 | 1 |
| andrianrf/ | 6036614803d4 | curl | 0:7.76.1-23.el9_2.7 | 1 |
| andrianrf/ | 7da47f525c7d | curl | 0:7.76.1-23.el9_2.7 | 1 |
| anguda/ | c435285fc241 | curl | 7.68.0-1ubuntu2.22 | 1 |
| apache/ | 64e58748b6b9 | curl | 7.88.1-10+deb12u6 | 1 |
| apache/ | e5560ad0b86e | curl | 7.88.1-10+deb12u6 | 1 |
| apache/ | 3bb13d14f64a | curl | 0:7.61.1-34.el8_10.2 | 1 |
| apache/ | afa47bf1692a | curl | 7.68.0-1ubuntu2.22 | 1 |
| apachepulsar/ | 16f9fdab3fa6 | curl | 7.81.0-1ubuntu1.16 | 1 |
| apachepulsar/ | 3b262ab7a7d9 | curl | 7.68.0-1ubuntu2.22 | 1 |
| apachepulsar/ | d056c89b7131 | curl | 7.68.0-1ubuntu2.22 | 1 |
| apachepulsar/ | d538416d5afe | curl | 7.68.0-1ubuntu2.22 | 1 |
| apache/ | c8fb51195444 | curl | 7.81.0-1ubuntu1.16 | 1 |
| apache/ | 133d35d2c263 | curl | 7.81.0-1ubuntu1.16 | 1 |
| apache/ | b4ec8c18d079 | curl | 7.68.0-1ubuntu2.22 | 1 |