StackRadar

CVE-2024-30171

Medium

Advisory

Published 14 May 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
220
of 17,781 indexed, latest versions
Container images
253
deployed by those charts
Fix available
7 of 8
affected packages

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

Carried by container images the latest versions of 220 of 17,781 indexed charts deploy, on 253 images.

Affected packageAffected versionsFixed inImages
bcprov-jdk15onmaven1.50, 1.51, 1.52, 1.53+16 more1.78210
bcprov-jdk18onmaven1.71, 1.72, 1.73, 1.74+3 more1.7840
bcprov-jdk15to18maven1.63, 1.65, 1.70, 1.72+3 more1.7813
bctls-fipsmaven1.0.9, 1.0.131.0.192
bctls-jdk18onmaven1.711.781
bouncycastledeb1.61-11.61-1ubuntu0.1~esm11
BouncyCastlenuget1.8.5no fix listed1
BouncyCastle.Cryptographynuget2.3.02.3.11
OSV records
GHSA-v435-xc8x-wvr9UBUNTU-CVE-2024-30171
Also known as
USN-8108-1

Charts affected

220 by stars
ChartLatestAffected imagesRadar Score
torznab-atomohdluiscajl0.0.31 of 1See more

torznab-atomohd luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
lavandadelpatio/torznab-atomohd:latest214eaef5444c
bcprov-jdk15on@1.69
1.78

Open the chart page →

3,290
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
bcprov-jdk18on@1.76
1.78

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
bcprov-jdk18on@1.73
1.78

Open the chart page →

5,129
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
bcprov-jdk18on@1.73
1.78

Open the chart page →

4,599
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
bcprov-jdk15on@1.60
1.78

Open the chart page →

11,188
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
bcprov-jdk15on@1.60
1.78

Open the chart page →

15,855
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
bcprov-jdk15on@1.68
1.78

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
bcprov-jdk15on@1.68
1.78

Open the chart page →

10,603
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
bcprov-jdk15on@1.69
1.78

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
bcprov-jdk15on@1.69
1.78

Open the chart page →

15,675
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2ebf761c7d437
bcprov-jdk15on@1.70
1.78

Open the chart page →

5,663
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
bcprov-jdk15on@1.69
1.78

Open the chart page →

8,928
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
bcprov-jdk15on@1.64
1.78

Open the chart page →

9,300
datawolfncsaVerified publisher1.1.01 of 3See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ncsa/datawolf:4.7.0af6649d59150
bcprov-jdk18on@1.72
1.78

Open the chart page →

4,989
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
bcprov-jdk18on@1.77
1.78

Open the chart page →

15,369
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
bcprov-jdk15on@1.68
1.78

Open the chart page →

2,640
config-server-helm-chartnotesprojectchart0.1.01 of 1See more

config-server-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
vlebediantsev/config-server-another:lateste7f20450d2ae
bcprov-jdk15on@1.68
1.78

Open the chart page →

3,422
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
bcprov-jdk15on@1.68
1.78

Open the chart page →

5,875
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
bcprov-jdk15on@1.69
1.78

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
bcprov-jdk15on@1.64
1.78

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
bcprov-jdk15on@1.68
1.78

Open the chart page →

5,873
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
bcprov-jdk18on@1.77
1.78

Open the chart page →

5,826
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
bcprov-jdk15on@1.60
1.78

Open the chart page →

8,540
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
bcprov-jdk18on@1.75
1.78

Open the chart page →

9,005
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
bcprov-jdk15on@1.69
bcprov-jdk18on@1.74
1.78
1.78

Open the chart page →

6,037
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
bcprov-jdk15on@1.56
1.78

Open the chart page →

63,223
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
bcprov-jdk15on@1.59
1.78

Open the chart page →

12,927
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
voltha/voltha-onos:5.1.8e038acb950d3
bcprov-jdk15on@1.69
1.78

Open the chart page →

41,044
bpjstk-serviceopenshift1.0.02 of 6See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
andrianrf/iso-client:latestba560086ce15
bcprov-jdk15on@1.51
1.78
andrianrf/iso-server:latest7da47f525c7d
bcprov-jdk15on@1.51
1.78

Open the chart page →

34,671
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
bcprov-jdk15on@1.50
1.78

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
bcprov-jdk15on@1.50
1.78

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
bcprov-jdk15on@1.50
1.78

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
bcprov-jdk15on@1.50
1.78

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
bcprov-jdk15on@1.50
1.78

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
bcprov-jdk15on@1.50
1.78

Open the chart page →

13,100
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.77
1.78
1.78

Open the chart page →

1,190
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
bcprov-jdk15to18@1.75
1.78

Open the chart page →

1,753
helloworldpauls-helm-charts2.0.01 of 1See more

helloworld pauls-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
paulczar/spring-helloworld:latestc7140cecd5f7
bcprov-jdk15on@1.60
1.78

Open the chart page →

5,596
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
bcprov-jdk15on@1.67
1.78

Open the chart page →

6,237
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
bcprov-jdk18on@1.77
bctls-fips@1.0.13
1.78
1.0.19

Open the chart page →

5,269
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
bcprov-jdk18on@1.76
1.78

Open the chart page →

4,203
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
bcprov-jdk15on@1.64
1.78
reportportal/service-authorization:5.7.09e73114dbd15
bcprov-jdk15on@1.64
1.78

Open the chart page →

25,737
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
bcprov-jdk15on@1.68
1.78

Open the chart page →

16,101
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
bcprov-jdk15on@1.68
1.78

Open the chart page →

8,033
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
bcprov-jdk15on@1.59
1.78

Open the chart page →

8,098
guacamolesergiotocaliniVerified publisher1.0.01 of 2See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
guacamole/guacamole:1.5.50f62f6d17ab3
bcprov-jdk15on@1.70
1.78

Open the chart page →

5,456
shenyushenyu0.6.31 of 2See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.5.11bd5756f6273
bcprov-jdk15on@1.69
1.78

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
bcprov-jdk15on@1.64
1.78

Open the chart page →

12,513
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
bcprov-jdk15on@1.70
1.78

Open the chart page →

6,443
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-30171.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
bcprov-jdk15to18@1.75
1.78

Open the chart page →

4,946

Container images carrying it

253 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
bcprov-jdk18on@1.74
1.78
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.