CVE-2024-3596
CriticalAdvisory
Published 9 Jul 2024In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.0
- base score, highest
- EPSS
- 0.149
- 96th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 776
- of 17,790 indexed, latest versions
- Container images
- 775
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
Red Hat Security Advisory: krb5 security update
Carried by container images the latest versions of 776 of 17,790 indexed charts deploy, on 775 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| krb5deb | 1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+23 more | 1.12+dfsg-2ubuntu5.4+esm6, 1.13.2+dfsg-5ubuntu2.2+esm6, 1.16-2ubuntu0.4+esm3, 1.17-6ubuntu4.8+2 more | 540 |
| krb5rpm | 1.15.1-37.el7_6, 1.15.1-37.el7_7.2, 1.15.1-46.el7, 1.15.1-50.el7+26 more | 0:1.15.1-55.el7_9.3, 0:1.17-19.el8_2.2, 0:1.18.2-9.el8_4.2, 0:1.18.2-16.el8_6.2+4 more | 235 |
| freeradiusdeb | 2.2.8+dfsg-0.1ubuntu0.1, 3.0.21+git | no fix listed | 2 |
- OSV records
- RHSA-2024:8461RHSA-2024:8788RHSA-2024:8789RHSA-2024:8791RHSA-2024:8792RHSA-2024:8794RHSA-2024:8860RHSA-2024:9474UBUNTU-CVE-2024-3596RLSA-2024:8860RLSA-2024:9474
- Also known as
- RHSA-2024:9547, USN-7257-1
Charts affected
776 by stars
Container images carrying it
775 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | c2851757eca4 | krb5 | 0:1.18.2-30.el8_10 | 1 |
| quay.io/ | 4560083eb77d | krb5 | 0:1.18.2-26.el8_8.3 | 1 |
| quay.io/ | 50ee58bc9770 | krb5 | 0:1.18.2-16.el8_6.2 | 1 |
| quay.io/ | 546a8b52d7b0 | krb5 | 0:1.18.2-16.el8_6.2 | 1 |
| quay.io/ | c3d20bc2ea08 | krb5 | 0:1.18.2-16.el8_6.2 | 1 |
| quay.io/ | d853057f2800 | krb5 | 0:1.18.2-16.el8_6.2 | 1 |
| quay.io/ | edb322094359 | krb5 | 0:1.18.2-26.el8_8.3 | 1 |
| quay.io/ | a1c3843b03bc | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm6 | 1 |
| quay.io/ | 107a7c73af59 | krb5 | 0:1.18.2-30.el8_10 | 1 |
| quay.io/ | 6722d5041b47 | krb5 | 0:1.17-19.el8_2.2 | 1 |
| quay.io/ | 0bbe8b451fa3 | krb5 | 0:1.17-19.el8_2.2 | 1 |
| quay.io/ | c241c971aef8 | krb5 | 0:1.18.2-16.el8_6.2 | 1 |
| quay.io/ | c6a934439421 | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm6 | 1 |
| quay.io/ | 89ee6493af89 | krb5 | 0:1.18.2-9.el8_4.2 | 1 |
| quay.io/ | 59fe607dfdf2 | krb5 | 0:1.21.1-4.el9_5 | 1 |
| quay.io/ | 7b4202c25b67 | krb5 | 0:1.20.1-9.el9_2.2 | 1 |
| quay.io/ | 0290e7b2800a | krb5 | 0:1.18.2-30.el8_10 | 1 |
| quay.io/ | 030ade9b9428 | krb5 | 0:1.21.1-4.el9_5 | 1 |
| quay.io/ | 6ba82beff18e | krb5 | 0:1.18.2-9.el8_4.2 | 1 |
| quay.io/ | e9e03b31007c | krb5 | 0:1.18.2-26.el8_8.3 | 1 |
| quay.io/ | 8e928db29ee1 | krb5 | 0:1.18.2-30.el8_10 | 1 |
| registry.gitlab.com/ | cf72810d33f5 | krb5 | 0:1.18.2-9.el8_4.2 | 1 |
| registry.gitlab.com/ | 36b19b72120e | krb5 | 0:1.18.2-30.el8_10 | 1 |
| registry.gitlab.com/ | f6385712935f | krb5 | 1.17-6ubuntu4.8 | 1 |
| registry.gitlab.com/ | 9d1fcb78f529 | krb5 | 0:1.18.2-30.el8_10 | 1 |