CVE-2024-2511

Medium

Advisory

Published 8 Apr 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.540; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,477; of 17,803 indexed, latest versions
Container images: 1,542; deployed by those charts
Fix available: 3 of 4; affected packages

libopenssl-1_1-devel-1.1.1w-9.1 on GA media

Carried by container images the latest versions of 1,477 of 17,803 indexed charts deploy, on 1,542 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+79 more	1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.23+4 more	956
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+19 more	3.0.12-r5, 3.1.4-r6, 3.2.1-r2, 3.3.0-r5	583
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl-1_1rpm	1.1.0i-lp151.8.3.1, 1.1.1d-11.6.1	1.1.1d-150200.11.88.1, 1.1.1w-9.1	3

OSV records: ALPINE-CVE-2024-2511 CGA-4h7g-x3x2-h94m DEBIAN-CVE-2024-2511 UBUNTU-CVE-2024-2511 openSUSE-SU-2024:13937-1 SUSE-SU-2024:1633-1
Also known as: CGA-g7wx-8452-qfp7, USN-6937-1, USN-8678-2

Charts affected

1,477 by stars

Chart

Latest

Affected images

Radar Score

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

10,879

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.23

Open the chart page →

15,310

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.17
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.17

Open the chart page →

10,602

wexa-studiowexa-studio

1.2.0

2 of 15 See more

wexa-studio wexa-studio 1.2.0

2 of the 15 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.15.4	0b01ed3924e6	openssl@3.1.4-r1	3.1.4-r6
qdrant/qdrant :v1.7.4	5f2a56b95266	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1

Open the chart page →

15,056

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.17

Open the chart page →

9,340

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm5

Open the chart page →

6,336

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1

Open the chart page →

5,566

wiremind-baremetalwiremind

2.0.2

1 of 1 See more

wiremind-baremetal wiremind 2.0.2

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
library/alpine :3.18.0	02bb6f428431	openssl@3.1.0-r4	3.1.4-r6

Open the chart page →

487

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1 openssl@3.0.2-0ubuntu1.16	no fix listed 3.0.2-0ubuntu1.17

Open the chart page →

14,218

workadventureworkadventure

1.1.0

1 of 9 See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
matthiasluedtke/iconserver :v3.16.0	661d607b0fbc	openssl@3.1.3-r0	3.1.4-r6

Open the chart page →

16,091

oauth2xd

1.0.0

1 of 1 See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
lishimeng/hufu :v1.2.1	3d5752dac834	openssl@3.0.8-r0	3.0.12-r5

Open the chart page →

2,008

owlxd

0.5.1

2 of 2 See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
lishimeng/owl-console :v0.11.2	c79a67657baf	openssl@3.0.8-r0	3.0.12-r5
lishimeng/owl-messager :v0.11.2	3d00485e64dc	openssl@3.0.8-r0	3.0.12-r5

Open the chart page →

3,882

passportxd

0.2.16

2 of 2 See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
lishimeng/passport :v0.2.16	3e7d05ded625	openssl@3.0.8-r0	3.0.12-r5
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	openssl@3.0.8-r0	3.0.12-r5

Open the chart page →

3,976

tabbyxd

1.0.6

2 of 2 See more

tabby xd 1.0.6

2 of the 2 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1
lishimeng/tabby :v1.0.4	8145c3dc83c8	openssl@3.0.8-r0	3.0.12-r5

Open the chart page →

7,714

treexd

0.1.10

1 of 1 See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
lishimeng/tree :v0.2.8	9b2f8be6c7d3	openssl@3.0.8-r0	3.0.12-r5

Open the chart page →

1,998

zooxd

0.4.0

1 of 1 See more

1,955

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.2

Open the chart page →

2,152

prometheusalertygqygq2

1.0.0

1 of 1 See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
feiyu563/prometheus-alert :v4.9.1	224cfa68cbd9	openssl@3.1.4-r5	3.1.4-r6

Open the chart page →

1,610

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1

Open the chart page →

2,692

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	openssl@3.0.9-r1	3.0.12-r5
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	openssl@3.0.9-r1	3.0.12-r5

Open the chart page →

5,047

zahori-postgresqlzahori

1.0.1

1 of 1 See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
library/postgres :12.15-alpine	73ea9cdd4a9d	openssl@3.1.2-r0	3.1.4-r6

Open the chart page →

448

zahori-processzahori

1.0.1

1 of 1 See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-process :0.1.13	351f8a220ed7	openssl@3.1.1-r1	3.1.4-r6

Open the chart page →

3,487

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

2,474

zahori-serverzahori

1.0.1

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	openssl@3.0.7-r2	3.0.12-r5
zahoriaut/zahori-server :0.1.17	b2de13916f3e	openssl@3.0.8-r3	3.0.12-r5

Open the chart page →

5,852

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	openssl@3.1.4-r5	3.1.4-r6

Open the chart page →

1,590

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	openssl@1.1.1-1ubuntu2.1~18.04.14	1.1.1-1ubuntu2.1~18.04.23+esm10
yandex/clickhouse-server :21.3.20	4eccfffb01d7	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.23

Open the chart page →

9,272

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-2511.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,936

Container images carrying it

1,542 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.23	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.23	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.23	1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm5	1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm5	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.23	1
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	openssl@3.1.4-r2	3.2.1-r2	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm5	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm5	1
ghcr.io/substra/substra-frontend :1.0.0	e230e6ac0722	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
ghcr.io/talhajuikar/stateful-data-generator :v1.1.1	dfd7ea7303a2	openssl@3.1.2-r0	3.1.4-r6	1
ghcr.io/tasmoadmin/tasmoadmin :v3.3.2	05aeefbdac2b	openssl@3.1.4-r1	3.1.4-r6	1
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
ghcr.io/techno-tim/littlelink-server :latest	735a1fcd078b	openssl@3.1.4-r5	3.1.4-r6	1
ghcr.io/topolvm/pie :0.18.0	aa467443e407	openssl@3.0.2-0ubuntu1.26	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	openssl@3.0.2-0ubuntu1.26	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	openssl@3.0.2-0ubuntu1.18	no fix listed	1
ghcr.io/traefik/traefik-hub :v2.11.0	322f5f8cc105	openssl@3.1.4-r5	3.1.4-r6	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	openssl@3.0.2-0ubuntu1.18	no fix listed	1
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	openssl@3.0.9-1	3.0.14-1~deb12u1	1
ghcr.io/vshn/stardog-userrole-operator :v0.3.0	4774237c9e86	openssl@3.0.12-r4	3.0.12-r5	1
ghcr.io/waldo-vision/migrate :v0.3.6	ae31923312ed	openssl@3.0.8-r3	3.0.12-r5	1
ghcr.io/waldo-vision/web :v0.3.6	5bbc7647df07	openssl@3.0.8-r3	3.0.12-r5	1
ghcr.io/wasi-master/13ft :0.3.4	563ce7794a71	openssl@3.1.4-r5	3.1.4-r6	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.23+esm10	1
ghcr.io/wolveix/satisfactory-server :v1.9.10	e0f2f8c97598	openssl@3.0.2-0ubuntu1.19	no fix listed	1
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
ghcr.io/zystem-io/zymtrace-pub-gateway :26.9.2	ae9ae0925ff8	openssl@3.0.2-0ubuntu1.20	no fix listed	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.23	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm10	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.23	1
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	openssl@3.0.2-0ubuntu1.25	no fix listed	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm10	1
public.ecr.aws/cloudnatix/llmariner/envsubst :1.17.0	af66e52f852a	openssl@3.1.4-r5	3.1.4-r6	1
public.ecr.aws/cloudnatix/llmariner/envsubst :1.19.1	ffc29318c5e9	openssl@3.1.4-r5	3.1.4-r6	1
public.ecr.aws/docker/library/redis :7.0.13-alpine	873c49204b64	openssl@3.1.3-r0	3.1.4-r6	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	openssl@3.0.2-0ubuntu1.19	no fix listed	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm10	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.23	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
public.ecr.aws/zinclabs/openobserve :v0.8.1	27f8de509169	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
quay.io/aerokube/jumphost :1.0.1	70fd7c00418d	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17	1
quay.io/aerokube/keygen :1.0.1	578934444f04	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17	1