CVE-2024-34156

High

Advisory

Published 6 Sept 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.011; 65th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,506; of 17,911 indexed, latest versions
Container images: 2,918; deployed by those charts
Fix available: 9 of 10; affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 2,506 of 17,911 indexed charts deploy, on 2,918 images.

Affected package	Affected versions	Fixed in	Images
skopeorpm	2:1.11.2-0.1.el9, 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.11.2-0.3.module+el8.8.0+22332+2132e5c3, 2:1.16.1-2.el9_5	2
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-66.module+el8.8.0+22332+2132e5c3	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.15-4.module+el8.8.0+22332+2132e5c3	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.11-1.module+el8.8.0+22332+2132e5c3	1
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-3.el8_10	1
golang-1.19deb	1.19.8-2	no fix listed	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-1.module+el8.8.0+22332+2132e5c3	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-1.module+el8.8.0+22332+2132e5c3	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.0-3.module+el8.8.0+22332+2132e5c3	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+137 more	1.22.7	2,918

OSV records: DEBIAN-CVE-2024-34156 RHSA-2024:11217 RHSA-2024:7135 RHSA-2024:7769 GO-2024-3106
Also known as: BIT-golang-2024-34156, RHSA-2024:7455, RHSA-2024:7821, RHSA-2024:8111

Charts affected

2,506 by stars

Chart

Latest

Affected images

Radar Score

version-checkerymrs

0.2.3

1 of 1 See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	stdlib@go1.15.2	1.22.7

Open the chart page →

3,019

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	stdlib@go1.20.4	1.22.7
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	stdlib@go1.20.4	1.22.7

Open the chart page →

5,084

zahori-moonzahori

1.0.1

3 of 3 See more

zahori-moon zahori 1.0.1

3 of the 3 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/aerokube/moon :2.5.1	a8837b00ba1c	stdlib@go1.20.4	1.22.7
quay.io/aerokube/moon-conf :2.5.1	9ca307b30080	stdlib@go1.20.4	1.22.7
quay.io/aerokube/moon-ui :2.0.5	89990b146824	stdlib@go1.20.5	1.22.7

Open the chart page →

2,908

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	stdlib@go1.20.5	1.22.7

Open the chart page →

2,536

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	stdlib@go1.17.13	1.22.7

Open the chart page →

3,751

zookeeper-exporterzookeeper-exporter

0.1.0

1 of 1 See more

zookeeper-exporter zookeeper-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
dabealu/zookeeper-exporter :latest	86106fec315f	stdlib@go1.14.15	1.22.7

Open the chart page →

1,249

Container images carrying it

2,918 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mariadb :10.10.2	bfc25a68e113	stdlib@go1.16.7	1.22.7	1
library/mariadb :10.6.15	e22328f4d714	stdlib@go1.16.7	1.22.7	1
library/mariadb :10.9.4	fbb8456ebdb1	stdlib@go1.16.7	1.22.7	1
library/mariadb :11.7.2	fcc7fcd7114a	stdlib@go1.18.2	1.22.7	1
library/mongo :7.0.14	0032d2ca20db	stdlib@go1.21.12	1.22.7	1
library/mongo :4.4.13	05678ae4e5e1	stdlib@go1.16.7	1.22.7	1
library/mongo :4.4-bionic	3d0e6df9fd5b	stdlib@go1.16.3	1.22.7	1
library/mongo :5.0.14-focal	50cae5081ab4	stdlib@go1.17.10	1.22.7	1
library/mongo :6.0.12	646902910d6a	stdlib@go1.18.2	1.22.7	1
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.22.7	1
library/mongo :6.0.2	71a63fc2438e	stdlib@go1.17.10	1.22.7	1
library/mongo :5.0.21	7c81758cb295	stdlib@go1.19.12	1.22.7	1
library/mongo :7.0.12	ae1cf99fa7bf	stdlib@go1.21.12	1.22.7	1
library/mongo :4.4.18	d23ec07162ca	stdlib@go1.17.10	1.22.7	1
library/mongo :8.0.11	dca8d11fe467	stdlib@go1.18.2	1.22.7	1
library/mysql :8.4.3	106d5197fd8e	stdlib@go1.18.2	1.22.7	1
library/mysql :8.0.30	3c1aab708f6e	stdlib@go1.16.7	1.22.7	1
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.22.7	1
library/mysql :8.0.41	bf577825b52a	stdlib@go1.18.2	1.22.7	1
library/mysql :8.0.39	ccb8f749bb5e	stdlib@go1.18.2	1.22.7	1
library/mysql :8.0.40	d58ac93387f6	stdlib@go1.18.2	1.22.7	1
library/nats :2.7.2-alpine	8b3fb2423a8c	stdlib@go1.17.6	1.22.7	1
library/nats :2.10.17-alpine	b7752304692b	stdlib@go1.22.4	1.22.7	1
library/nats :2.10.12-alpine	bca70839d953	stdlib@go1.21.8	1.22.7	1
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.22.7	1
library/nats :2.9-alpine	d402af4147fc	stdlib@go1.20.14	1.22.7	1
library/nats :2.9.20-alpine	d6c6ae7df4a0	stdlib@go1.19.11	1.22.7	1
library/nats :2.9.6-alpine3.16	f576cdc17cc3	stdlib@go1.19.3	1.22.7	1
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.22.7	1
library/nats-streaming :0.25.5	ced93c701875	stdlib@go1.19.10	1.22.7	1
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.22.7	1
library/postgres :14.3	2d1e636f0778	stdlib@go1.16.7	1.22.7	1
library/postgres :17.4	304ab8135187	stdlib@go1.18.2	1.22.7	1
library/postgres :16.6	557fea37a744	stdlib@go1.18.2	1.22.7	1
library/postgres :13.11-bullseye	5c265bf1fd30	stdlib@go1.18.2	1.22.7	1
library/postgres :17.5-alpine	6567bca8d7bc	stdlib@go1.18.2	1.22.7	1
library/postgres :17.4-alpine	7062a2109c4b	stdlib@go1.18.2	1.22.7	1
library/postgres :12-alpine	7c8f48705831	stdlib@go1.18.2	1.22.7	1
library/postgres :17.2-alpine	7e5df973a748	stdlib@go1.18.2	1.22.7	1
library/postgres :15.3	8775adb39f0d	stdlib@go1.18.2	1.22.7	1
library/postgres :13.12	ced3ba927f4c	stdlib@go1.18.2	1.22.7	1
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.22.7	1
library/postgres :17.5-bookworm	fbcea1bd13b6	stdlib@go1.18.2	1.22.7	1
library/rabbitmq :4.1.8-management	3574a8edaca3	stdlib@go1.22.2	1.22.7	1
library/rabbitmq :4.3.6-management	534e4fefc5f0	stdlib@go1.22.2	1.22.7	1
library/rabbitmq :4.3.6	67bad329974a	stdlib@go1.22.2	1.22.7	1
library/rabbitmq :4.2.8	7561d672fae4	stdlib@go1.22.2	1.22.7	1
library/rabbitmq :4.3.6-management	de62d9901fb7	stdlib@go1.22.2	1.22.7	1
library/rabbitmq :4.3.4-management	eb5295d08332	stdlib@go1.22.2	1.22.7	1
library/redis :7.0.4	091a7b5de688	stdlib@go1.16.7	1.22.7	1