StackRadar

CVE-2024-30171

Medium

Advisory

Published 14 May 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
220
of 17,781 indexed, latest versions
Container images
253
deployed by those charts
Fix available
7 of 8
affected packages

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

Carried by container images the latest versions of 220 of 17,781 indexed charts deploy, on 253 images.

Affected packageAffected versionsFixed inImages
bcprov-jdk15onmaven1.50, 1.51, 1.52, 1.53+16 more1.78210
bcprov-jdk18onmaven1.71, 1.72, 1.73, 1.74+3 more1.7840
bcprov-jdk15to18maven1.63, 1.65, 1.70, 1.72+3 more1.7813
bctls-fipsmaven1.0.9, 1.0.131.0.192
bctls-jdk18onmaven1.711.781
bouncycastledeb1.61-11.61-1ubuntu0.1~esm11
BouncyCastlenuget1.8.5no fix listed1
BouncyCastle.Cryptographynuget2.3.02.3.11
OSV records
GHSA-v435-xc8x-wvr9UBUNTU-CVE-2024-30171
Also known as
USN-8108-1

Charts affected

220 by stars
ChartLatestAffected imagesRadar Score
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
bcprov-jdk15on@1.64
1.78

Open the chart page →

17,284
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
bcprov-jdk15on@1.68
1.78

Open the chart page →

12,019
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
bcprov-jdk15on@1.70
1.78

Open the chart page →

13,479
clowder2ncsaVerified publisher1.9.72 of 12See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
bcprov-jdk18on@1.76
1.78
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
bcprov-jdk15on@1.70
1.78

Open the chart page →

37,373
data-prepperopensearch-project-helm-chartsVerified publisher0.3.11 of 1See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
opensearchproject/data-prepper:2.8.057c25fa01d3c
bcprov-jdk18on@1.76
1.78

Open the chart page →

1,692
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
bcprov-jdk15on@1.64
1.78
treskon/portrait:DEV-latest88e813f22347
bcprov-jdk15on@1.70
bcprov-jdk18on@1.76
1.78
1.78

Open the chart page →

31,844
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
bcprov-jdk15on@1.69
1.78

Open the chart page →

4,621
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
bcprov-jdk15on@1.68
1.78

Open the chart page →

3,958
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
bcprov-jdk15on@1.64
1.78

Open the chart page →

6,045
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
bcprov-jdk15on@1.68
1.78

Open the chart page →

7,529
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
bcprov-jdk15on@1.59
1.78
seldonio/cluster-manager:0.2.729e362bb1ba2
bcprov-jdk15on@1.59
1.78

Open the chart page →

13,798
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
bcprov-jdk15on@1.69
bcprov-jdk18on@1.71
1.78
1.78

Open the chart page →

13,486
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
bcprov-jdk15on@1.69
1.78

Open the chart page →

24,930
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
bcprov-jdk18on@1.73
1.78

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
bcprov-jdk18on@1.73
1.78

Open the chart page →

9,102
accountaccount-serviceVerified publisher0.4.21 of 1See more

account account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
vitalii1992/account-service:latest0e694d94551d
bcprov-jdk15on@1.69
1.78

Open the chart page →

2,168
analyticsaccount-serviceVerified publisher0.4.21 of 1See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
vitalii1992/analytics-service:latest8e798836ecea
bcprov-jdk15on@1.69
1.78

Open the chart page →

2,326
gatewayaccount-serviceVerified publisher0.4.21 of 1See more

gateway account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
vitalii1992/api-gateway-service:latestaabe6ac39356
bcprov-jdk15on@1.69
1.78

Open the chart page →

2,853
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
bcprov-jdk15on@1.69
1.78

Open the chart page →

7,713
orderaccount-serviceVerified publisher0.4.21 of 1See more

order account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
vitalii1992/order-service:latest07c4a8833ce4
bcprov-jdk15on@1.69
1.78

Open the chart page →

2,221
quotes-provideraccount-serviceVerified publisher0.4.21 of 1See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
bcprov-jdk15on@1.69
1.78

Open the chart page →

2,205
airbyte-cronairbyteVerified publisher0.40.371 of 1See more

airbyte-cron airbyte 0.40.37

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
airbyte/cron:0.40.17caf4f551c546
bcprov-jdk15on@1.64
1.78

Open the chart page →

1,413
mautrix-signalalexanderbadel0.1.11 of 2See more

mautrix-signal alexanderbadel 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
signald/signald:0.18.20ffad7ccc2eb
bcprov-jdk15on@1.70
1.78

Open the chart page →

2,099
amorphieamorphie0.1.22 of 18See more

amorphie amorphie 0.1.2

2 of the 18 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
bcprov-jdk18on@1.77
1.78
hazelcast/management-center:5.3.2f9d34300d330
bcprov-jdk15on@1.70
1.78

Open the chart page →

28,131
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
bcprov-jdk15on@1.70
1.78

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.02 of 4See more

james-kompose appscode 0.1.0

2 of the 4 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
bcprov-jdk15on@1.70
1.78
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
bcprov-jdk15on@1.70
1.78

Open the chart page →

16,975
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
bcprov-jdk15on@1.69
1.78

Open the chart page →

13,352
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
bcprov-jdk15on@1.66
1.78

Open the chart page →

7,936
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
bcprov-jdk15on@1.70
bcprov-jdk18on@1.71
1.78
1.78

Open the chart page →

9,722
keycloakbarravarVerified publisher1.0.41 of 1See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:24.0.34d6f22991266
bcprov-jdk18on@1.77
1.78

Open the chart page →

2,381
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
bcprov-jdk15on@1.68
1.78

Open the chart page →

5,806
blackduck-alertblackduck8.4.01 of 4See more

blackduck-alert blackduck 8.4.0

1 of the 4 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
bcprov-jdk18on@1.72
1.78

Open the chart page →

4,292
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
bcprov-jdk18on@1.77
1.78

Open the chart page →

8,323
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
bcprov-jdk15on@1.64
1.78
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
bcprov-jdk15on@1.69
1.78
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
bcprov-jdk15on@1.69
1.78
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
bcprov-jdk15on@1.69
1.78
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
bcprov-jdk15on@1.69
1.78
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
bcprov-jdk15on@1.69
1.78

Open the chart page →

88,335
opensearch-singlenodecaptnbpVerified publisher1.0.91 of 2See more

opensearch-singlenode captnbp 1.0.9

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.15.01963b3ece46d
bcprov-jdk15to18@1.74
1.78

Open the chart page →

1,073
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
bcprov-jdk15on@1.55
1.78

Open the chart page →

9,808
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
bcprov-jdk15on@1.61
bcprov-jdk15to18@1.63
1.78
1.78

Open the chart page →

6,447
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
bcprov-jdk15on@1.59
1.78

Open the chart page →

9,144
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
bcprov-jdk15on@1.59
1.78

Open the chart page →

2,837
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
bcprov-jdk15on@1.51
1.78

Open the chart page →

7,226
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
bcprov-jdk15on@1.51
1.78

Open the chart page →

23,665
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
bcprov-jdk15on@1.60
1.78

Open the chart page →

22,442
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
bcprov-jdk15on@1.60
1.78

Open the chart page →

16,860
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
bcprov-jdk15on@1.70
1.78

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
bcprov-jdk15on@1.70
1.78

Open the chart page →

7,963
cp-helm-chartscp-helm-charts0.6.15 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

5 of the 8 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
bcprov-jdk15on@1.68
1.78
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
bcprov-jdk15on@1.68
1.78
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
bcprov-jdk15on@1.68
1.78
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
bcprov-jdk15on@1.68
1.78
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
bcprov-jdk15on@1.68
1.78

Open the chart page →

58,857
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
bcprov-jdk15on@1.70
1.78

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
bcprov-jdk15on@1.70
1.78

Open the chart page →

6,915
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
library/neo4j:3.3.0d4eaa8484246
bcprov-jdk15on@1.53
1.78

Open the chart page →

11,174
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
bcprov-jdk15on@1.54
1.78

Open the chart page →

5,639

Container images carrying it

253 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
bcprov-jdk18on@1.74
1.78
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.