CVE-2024-33599
HighAdvisory
Published 6 May 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.013
- 69th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 765
- of 17,787 indexed, latest versions
- Container images
- 730
- deployed by those charts
- Fix available
- 3 of 4
- affected packages
glibc-2.39-6.1 on GA media
Carried by container images the latest versions of 765 of 17,787 indexed charts deploy, on 730 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| glibcdeb | 2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+29 more | 2.23-0ubuntu11.3+esm7, 2.27-3ubuntu1.6+esm3, 2.31-0ubuntu9.16, 2.35-0ubuntu3.8+2 more | 719 |
| eglibcdeb | 2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more | no fix listed | 7 |
| glibcapk | 2.37-r6, 2.38-r6 | 2.39-r5 | 2 |
| glibcrpm | 2.26-lp151.18.7 | 2.39-6.1 | 2 |
- OSV records
- CGA-7w7q-764g-3jg9DEBIAN-CVE-2024-33599UBUNTU-CVE-2024-33599openSUSE-SU-2024:13935-1
- Also known as
- CGA-wh7m-8f42-c5qg, USN-6804-1
Charts affected
765 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| myweatherhelmwebapp1 | 1.3.50 | 1 of 8See more | 9,130 |
| myweatherhelm-schedulingwebapp1 | 1.3.92 | 1 of 9See more | 9,130 |
| web-dvwaweb-dvwa | 1.16.0 | 1 of 2See more | 10,001 |
| webhookiewebhookie | 0.1.2 | 1 of 1See more | 14,364 |
| webhookie-allwebhookie | 0.1.2 | 1 of 3See more | 28,605 |
| emissary-ingresswenerme | 8.12.2 | 1 of 2See more | 10,843 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| openebswenerme | 3.10.0 | 2 of 3See more | 10,489 |
| wexa-studiowexa-studio | 1.2.0 | 1 of 15See more | 14,983 |
| jaegerwikimedia | 3.1.2 | 1 of 4See more | 9,248 |
| marge-botwiremindVerified publisher | 1.4.4 | 1 of 1See more | 5,542 |
| xlinexline | 0.0.1 | 1 of 1See more | 2,097 |
| api-snapyoukadevVerified publisher | 0.1.1 | 1 of 1See more | 2,661 |
| zahori-schedulerzahoriVerified publisher | 1.0.1 | 1 of 1See more | 2,458 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,207 |
Container images carrying it
730 by charts deploying them
A fixed version is listed for 3 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dniel/ | 45a667852f2a | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| dobtc/ | a870f7cb1105 | glibc | 2.36-9+deb12u7 | 1 |
| dremio/ | 80ed2e3b7c43 | glibc | 2.35-0ubuntu3.8 | 1 |
| drorivry4/ | e035d49b15ca | glibc | 2.36-9+deb12u7 | 1 |
| drpcorg/ | 8858fae1859d | glibc | 2.35-0ubuntu3.8 | 1 |
| duck1123/ | 0e29f19fa67c | glibc | 2.35-0ubuntu3.8 | 1 |
| duck1123/ | 9d6fb247b714 | glibc | 2.35-0ubuntu3.8 | 1 |
| elastic/ | c7a1c63257d0 | glibc | 2.31-0ubuntu9.16 | 1 |
| elastictranscoder/ | 963ab3858c6b | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| elastictranscoder/ | 26208b8c2359 | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| elastictranscoder/ | b4a0327029e6 | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| elastictranscoder/ | 5b75d19e2733 | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| empathyco/ | 03e724e41eeb | glibc | 2.31-0ubuntu9.16 | 1 |
| engrmth/ | 6d8464e6f0e8 | glibc | 2.31-0ubuntu9.16 | 1 |
| enix/ | f963da81ecf7 | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| envoyproxy/ | e596fda6a0ce | glibc | 2.35-0ubuntu3.8 | 1 |
| envoyproxy/ | e8b37c1d7578 | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| eqalpha/ | fd9351ce27a7 | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| esphome/ | 9ab8cc88b28c | glibc | 2.36-9+deb12u7 | 1 |
| esphome/ | b2c6322700ac | glibc | 2.36-9+deb12u7 | 1 |
| esphome/ | def8b6e4f517 | glibc | 2.36-9+deb12u7 | 1 |
| ethanbergstrom/ | 345c2a46c103 | glibc | 2.31-0ubuntu9.16 | 1 |
| ethereumex/ | a7603aa8df4c | glibc | 2.23-0ubuntu11.3+esm7 | 1 |
| ethersphere/ | a884fd84b72f | glibc | 2.36-9+deb12u7 | 1 |
| firefart/ | 0d6249906d8c | glibc | 2.36-9+deb12u7 | 1 |
| flanksource/ | 1dacc3195bf9 | glibc | 2.35-0ubuntu3.8 | 1 |
| flyway/ | 45b5d7cdc75a | glibc | 2.31-0ubuntu9.16 | 1 |
| fnzv/ | b3079b95c336 | glibc | 2.35-0ubuntu3.8 | 1 |
| foldingathome/ | 5ef7742d1eb4 | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| frankescobar/ | 8a4d7e9308de | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| frankescobar/ | cafa03b94dac | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| free5gmano/ | 36f806935519 | glibc | 2.23-0ubuntu11.3+esm7 | 1 |
| galaxy/ | e5c265fe9fcd | glibc | 2.31-0ubuntu9.16 | 1 |
| galaxy/ | 0267bad550e6 | eglibc | no fix listed | 1 |
| galaxy/ | 8e577a626dfd | eglibc | no fix listed | 1 |
| gchq/ | c460bb587d6d | glibc | 2.39-0ubuntu8.2 | 1 |
| geonetwork/ | 20c9bb761f67 | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| geoscienceaustralia/ | f4039b45572a | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| geoservercloud/ | ca58b74529cd | glibc | 2.31-0ubuntu9.16 | 1 |
| geoservercloud/ | 5dc0c93a1710 | glibc | 2.31-0ubuntu9.16 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | glibc | 2.31-0ubuntu9.16 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | glibc | 2.31-0ubuntu9.16 | 1 |
| geoservercloud/ | 8c70ee06d5ab | glibc | 2.31-0ubuntu9.16 | 1 |
| geoservercloud/ | 42775ba6a4da | glibc | 2.31-0ubuntu9.16 | 1 |
| gethue/ | 11b649636e68 | glibc | 2.31-0ubuntu9.16 | 1 |
| gethue/ | 5702b2c37ff9 | glibc | 2.27-3ubuntu1.6+esm3 | 1 |
| gitlab/ | 860d4a3fec7a | glibc | 2.31-0ubuntu9.16 | 1 |
| glasskube/ | be5133100d63 | glibc | 2.35-0ubuntu3.8 | 1 |
| golenski/ | c863dcb0c513 | glibc | 2.36-9+deb12u7 | 1 |
| golenski/ | 3a2b36df247b | glibc | 2.36-9+deb12u7 | 1 |