StackRadar

CVE-2024-3596

Critical

Advisory

Published 9 Jul 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.0
base score, highest
EPSS
0.149
96th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
772
of 17,787 indexed, latest versions
Container images
771
deployed by those charts
Fix available
2 of 3
affected packages

Red Hat Security Advisory: krb5 security update

Carried by container images the latest versions of 772 of 17,787 indexed charts deploy, on 771 images.

Affected packageAffected versionsFixed inImages
krb5deb1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+23 more1.12+dfsg-2ubuntu5.4+esm6, 1.13.2+dfsg-5ubuntu2.2+esm6, 1.16-2ubuntu0.4+esm3, 1.17-6ubuntu4.8+2 more538
krb5rpm1.15.1-37.el7_6, 1.15.1-37.el7_7.2, 1.15.1-46.el7, 1.15.1-50.el7+25 more0:1.15.1-55.el7_9.3, 0:1.17-19.el8_2.2, 0:1.18.2-9.el8_4.2, 0:1.18.2-16.el8_6.2+4 more233
freeradiusdeb2.2.8+dfsg-0.1ubuntu0.1, 3.0.21+gitno fix listed2
OSV records
RHSA-2024:8461RHSA-2024:8788RHSA-2024:8789RHSA-2024:8791RHSA-2024:8792RHSA-2024:8794RHSA-2024:8860RHSA-2024:9474UBUNTU-CVE-2024-3596RLSA-2024:8860RLSA-2024:9474
Also known as
RHSA-2024:9547, USN-7257-1

Charts affected

772 by stars
ChartLatestAffected imagesRadar Score
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
flyway/flyway:6.4.422d97ceb0c47
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm3

Open the chart page →

20,190
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.8

Open the chart page →

11,405
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
flyway/flyway:6.4.422d97ceb0c47
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm3

Open the chart page →

20,190
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
wateim/lighthouse-launch:latest2520149ee574
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.5

Open the chart page →

4,998
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8

Open the chart page →

11,119
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.5

Open the chart page →

6,232
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm3

Open the chart page →

9,743
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.8

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.8

Open the chart page →

9,130
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8

Open the chart page →

14,364
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
krb5@1.18.2-8.el8
0:1.18.2-9.el8_4.2

Open the chart page →

28,605
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm3

Open the chart page →

10,843
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8

Open the chart page →

15,230
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
krb5@1.18.2-5.el8
0:1.18.2-30.el8_10

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
krb5@1.18.2-14.el8
0:1.18.2-30.el8_10

Open the chart page →

6,138
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.5
openebs/node-disk-operator:2.1.06afe2123c457
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.5

Open the chart page →

10,489
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.5

Open the chart page →

9,248
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.5

Open the chart page →

14,100
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
krb5@1.18.2-14.el8
0:1.18.2-30.el8_10

Open the chart page →

11,577
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.3

Open the chart page →

2,097
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
krb5@1.18.2-22.el8_7
0:1.18.2-30.el8_10

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2024-3596.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
krb5@1.18.2-22.el8_7
0:1.18.2-30.el8_10

Open the chart page →

3,697

Container images carrying it

771 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
krb5@1.18.2-8.el8
0:1.18.2-9.el8_4.2
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
krb5@1.18.2-9.el8_4
0:1.18.2-9.el8_4.2
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
krb5@1.18.2-9.el8_4
0:1.18.2-9.el8_4.2
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
krb5@1.18.2-26.el8_9
0:1.18.2-30.el8_10
2
5200710/hadoop:3.2.3-java8092d3088a5fb
krb5@1.17-6ubuntu4.4
1.17-6ubuntu4.8
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
krb5@1.20.1-6ubuntu2.2
1.20.1-6ubuntu2.3
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.3
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
1
akeyless/base-rhel:0.0.14ba8900a0061
krb5@1.18.2-26.el8_9
0:1.18.2-30.el8_10
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm3
1
altinity/clickhouse-operator:0.19.07a85f522c5bc
krb5@1.18.2-22.el8_7
0:1.18.2-30.el8_10
1
altinity/clickhouse-operator:0.20.08f0f582d41f0
krb5@1.18.2-22.el8_7
0:1.18.2-26.el8_8.3
1
altinity/clickhouse-operator:0.16.1db7dde971407
krb5@1.15.1-50.el7
0:1.15.1-55.el7_9.3
1
altinity/metrics-exporter:0.20.01a46d104406d
krb5@1.18.2-22.el8_7
0:1.18.2-26.el8_8.3
1
altinity/metrics-exporter:0.16.185b4fdbae053
krb5@1.15.1-50.el7
0:1.15.1-55.el7_9.3
1
anchore/anchore-engine:v0.10.0bde9eedf639d
krb5@1.18.2-8.el8
0:1.18.2-9.el8_4.2
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
krb5@1.17-9.el8
0:1.18.2-30.el8_10
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
krb5@1.20.1-6ubuntu2.1
1.20.1-6ubuntu2.3
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.5
1
andrianrf/backoffice:latest047a7837651e
krb5@1.18.2-29.el8_10
0:1.18.2-30.el8_10
1
andrianrf/backoffice-be:latest6036614803d4
krb5@1.20.1-8.el9
0:1.20.1-9.el9_2.2
1
andrianrf/iso-server:latest7da47f525c7d
krb5@1.20.1-8.el9
0:1.20.1-9.el9_2.2
1
anguda/ant-media:2.5c435285fc241
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.8
1
apache/activemq-artemis:2.37.0bae523439ee3
krb5@1.20.1-6ubuntu2.1
1.20.1-6ubuntu2.3
1
apache/camel-k:1.10.43bb13d14f64a
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.2
1
apache/iotdb:0.13.3-nodeafa47bf1692a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
1
apache/nifi-registry:1.27.063b8e3e40742
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.5
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.5
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
1
apachepulsar/pulsar:3.0.79c9947de139d
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.5
1
apachepulsar/pulsar:2.9.0d056c89b7131
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
1
apachepulsar/pulsar:2.8.2d538416d5afe
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
1
apache/rocketmq:5.3.0434d8398f996
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.3
1
apache/rocketmq-exporter:0.0.2c8fb51195444
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.5
1
apache/skywalking-oap-server:9.2.0133d35d2c263
krb5@1.19.2-2
1.19.2-2ubuntu0.5
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
1
apache/skywalking-ui:9.2.0295f1dc87d98
krb5@1.19.2-2
1.19.2-2ubuntu0.5
1
apache/skywalking-ui:8.9.180530f0308a5
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
1
apache/tika:2.9.0.092d055a84e9e
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.5
1
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.3
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
krb5@1.18.2-8.el8
0:1.18.2-9.el8_4.2
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.3
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.3
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.3
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.8
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.8
1
assistiot/identity-manager_kc:latest0df4b4fa899a
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.2
1
assistiot/location_processing:lateste9bae124095f
krb5@1.19.2-2
1.19.2-2ubuntu0.5
1
assistiot/open_api_backend:1.1.230812ba93555
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.