StackRadar

CVE-2024-30171

Medium

Advisory

Published 14 May 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
220
of 17,781 indexed, latest versions
Container images
253
deployed by those charts
Fix available
7 of 8
affected packages

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

Carried by container images the latest versions of 220 of 17,781 indexed charts deploy, on 253 images.

Affected packageAffected versionsFixed inImages
bcprov-jdk15onmaven1.50, 1.51, 1.52, 1.53+16 more1.78210
bcprov-jdk18onmaven1.71, 1.72, 1.73, 1.74+3 more1.7840
bcprov-jdk15to18maven1.63, 1.65, 1.70, 1.72+3 more1.7813
bctls-fipsmaven1.0.9, 1.0.131.0.192
bctls-jdk18onmaven1.711.781
bouncycastledeb1.61-11.61-1ubuntu0.1~esm11
BouncyCastlenuget1.8.5no fix listed1
BouncyCastle.Cryptographynuget2.3.02.3.11
OSV records
GHSA-v435-xc8x-wvr9UBUNTU-CVE-2024-30171
Also known as
USN-8108-1

Charts affected

220 by stars
ChartLatestAffected imagesRadar Score
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
bcprov-jdk15on@1.64
1.78

Open the chart page →

19,802
dshackledysnixVerified publisher0.1.11 of 2See more

dshackle dysnix 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.12ac2a4bc66ab6
bcprov-jdk15on@1.61
bcprov-jdk15to18@1.63
1.78
1.78

Open the chart page →

2,237
entrypoint-balancereclipse-aeriosVerified publisher1.3.01 of 1See more

entrypoint-balancer eclipse-aerios 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
bcprov-jdk18on@1.77
1.78

Open the chart page →

2,512
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
bcprov-jdk15on@1.64
1.78

Open the chart page →

10,564
shenyuerdeng2.4.211 of 2See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
bcprov-jdk15on@1.64
1.78

Open the chart page →

12,513
dshackleethereum-helm-chartsVerified publisher0.1.91 of 2See more

dshackle ethereum-helm-charts 0.1.9

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.14.0126f0ae0b388
bcprov-jdk15on@1.61
bcprov-jdk15to18@1.63
1.78
1.78

Open the chart page →

2,021
faucethethereum-helm-chartsVerified publisher0.2.41 of 1See more

fauceth ethereum-helm-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ghcr.io/komputing/fauceth:release4ab8fa4143b4
bcprov-jdk15to18@1.70
1.78

Open the chart page →

1,373
fibfibonacci-cluster-appsVerified publisher1.0.03 of 5See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
bcprov-jdk18on@1.77
1.78
golenski/fibonacci-task-manager:2.0.03a2b36df247b
bcprov-jdk18on@1.77
1.78
golenski/fibonacci-worker:2.0.0954caf4aaf6a
bcprov-jdk18on@1.77
1.78

Open the chart page →

16,927
canis-majorfiware0.2.31 of 1See more

canis-major fiware 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
bcprov-jdk15on@1.65
1.78

Open the chart page →

8,528
scorpio-brokerfiware0.3.310 of 10See more

scorpio-broker fiware 0.3.3

10 of the 10 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
bcprov-jdk15on@1.60
1.78
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
bcprov-jdk15on@1.68
1.78

Open the chart page →

55,600
scorpiobrokerfiware0.1.210 of 10See more

scorpiobroker fiware 0.1.2

10 of the 10 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
bcprov-jdk15on@1.60
1.78
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
bcprov-jdk15on@1.68
1.78
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
bcprov-jdk15on@1.68
1.78

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
bcprov-jdk15on@1.68
1.78

Open the chart page →

5,286
trusted-issuers-registryfiware0.13.01 of 1See more

trusted-issuers-registry fiware 0.13.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
bcprov-jdk15on@1.70
1.78

Open the chart page →

7,087
my-chartfleet-web-app0.1.01 of 6See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
bcprov-jdk15on@1.55
1.78

Open the chart page →

24,296
openhabgeek-cookbookVerified publisher1.5.21 of 1See more

openhab geek-cookbook 1.5.2

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
openhab/openhab:3.2.0d0aa4af452c1
bcprov-jdk15on@1.69
1.78

Open the chart page →

2,887
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
bcprov-jdk15on@1.52
1.78

Open the chart page →

27,949
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
bcprov-jdk15on@1.68
1.78

Open the chart page →

26,944
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
bcprov-jdk15on@1.69
1.78

Open the chart page →

4,921
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.83 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
bcprov-jdk15on@1.64
1.78
jingking/geonetwork-hnap:4.2.843e74ab234e1
bcprov-jdk15on@1.68
1.78
library/elasticsearch:7.17.1588c2ec10c7f2
bcprov-jdk15on@1.64
1.78

Open the chart page →

34,754
ldap-backupgluuVerified publisher1.6.111 of 1See more

ldap-backup gluu 1.6.11

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
gluufederation/opendj:4.3.0_011a1128b28b95
bctls-fips@1.0.9
1.0.19

Open the chart page →

3,064
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
bcprov-jdk15on@1.60
1.78

Open the chart page →

15,722
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
bcprov-jdk15on@1.59
1.78

Open the chart page →

17,511
mautrix-signalhalkeye0.3.01 of 2See more

mautrix-signal halkeye 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
signald/signald:0.23.2edbff058278c
bcprov-jdk15on@1.70
1.78

Open the chart page →

1,499
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
bcprov-jdk15on@1.53
1.78

Open the chart page →

4,303
hbasehbase0.1.72 of 4See more

hbase hbase 0.1.7

2 of the 4 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
bcprov-jdk15on@1.62
1.78
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
bcprov-jdk15on@1.60
1.78

Open the chart page →

10,540
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
bcprov-jdk15on@1.56
1.78

Open the chart page →

6,451
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
alfio/alf.io:2.0-M5-26060c836a081446
bcprov-jdk15on@1.70
1.78

Open the chart page →

2,091
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
bcprov-jdk15on@1.70
1.78

Open the chart page →

9,920
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
bcprov-jdk18on@1.71
1.78
apache/skywalking-ui:9.2.0295f1dc87d98
bcprov-jdk15on@1.68
1.78

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
bcprov-jdk15on@1.69
1.78
apache/skywalking-ui:8.9.180530f0308a5
bcprov-jdk15on@1.68
1.78

Open the chart page →

20,650
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
bcprov-jdk15on@1.69
bcprov-jdk15to18@1.72
bcprov-jdk18on@1.71
1.78
1.78
1.78

Open the chart page →

7,144
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
bcprov-jdk15on@1.69
bcprov-jdk15to18@1.72
bcprov-jdk18on@1.71
1.78
1.78
1.78

Open the chart page →

7,862
ibm-app-navigatoribm-charts1.0.11 of 5See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ibmcom/app-nav-api:1.0.1ce9d2a564273
bcprov-jdk15on@1.62
1.78

Open the chart page →

32,915
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
bcprov-jdk15on@1.61
1.78

Open the chart page →

39,349
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
bcprov-jdk15on@1.55
1.78
ibmcom/microclimate-theia:lateste17bdccc5030
bcprov-jdk15on@1.55
1.78

Open the chart page →

57,669
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
bcprov-jdk15on@1.64
1.78

Open the chart page →

37,671
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
BouncyCastle.Cryptography@2.3.0
2.3.1

Open the chart page →

3,192
fpga-operatorinaccelVerified publisher2.8.21 of 7See more

fpga-operator inaccel 2.8.2

1 of the 7 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
inaccel/coral:2.18c53744ed70b
bcprov-jdk18on@1.77
1.78

Open the chart page →

5,759
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
thehiveproject/cortex:3.1.7f4bc64fb8844
bcprov-jdk15on@1.61
1.78

Open the chart page →

6,122
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
bcprov-jdk15on@1.54
1.78

Open the chart page →

10,682
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
bcprov-jdk15to18@1.65
1.78

Open the chart page →

12,856
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
bcprov-jdk15on@1.69
1.78

Open the chart page →

3,576
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
bcprov-jdk15on@1.69
1.78

Open the chart page →

7,254
tampkubebb5.6.01 of 2See more

tamp kubebb 5.6.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
kubebb/gateway-api:v5.6.04d062f20309c
bcprov-jdk15on@1.66
1.78

Open the chart page →

4,664
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
kubebb/mesh-api:v5.7.0a3879931dfa1
bcprov-jdk15on@1.58
1.78

Open the chart page →

6,490
fpga-operatorkubesphere-stable2.7.41 of 7See more

fpga-operator kubesphere-stable 2.7.4

1 of the 7 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
inaccel/coral:2.18c53744ed70b
bcprov-jdk18on@1.77
1.78

Open the chart page →

5,759
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ladeit/ladeit:latest962b665ffe82
bcprov-jdk15on@1.59
1.78

Open the chart page →

26,356
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
bcprov-jdk15on@1.62
1.78

Open the chart page →

7,929
lavandaluiscajl0.0.1341 of 5See more

lavanda luiscajl 0.0.134

1 of the 5 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
lavandadelpatio/tmdb:0.0.2f36af885e915
bcprov-jdk15on@1.64
1.78

Open the chart page →

18,248
tmdbluiscajl0.2.41 of 1See more

tmdb luiscajl 0.2.4

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
lavandadelpatio/tmdb:latestded9377636e9
bcprov-jdk15on@1.69
1.78

Open the chart page →

2,234

Container images carrying it

253 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
bcprov-jdk18on@1.74
1.78
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.