CVE-2024-4076

High

Advisory

Published 23 Jul 2024In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.021; 81st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 55; of 17,781 indexed, latest versions
Container images: 56; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 55 of 17,781 indexed charts deploy, on 56 images.

Affected package	Affected versions	Fixed in	Images
bind9deb	1:9.16.1-0ubuntu2.4, 1:9.16.1-0ubuntu2.8, 1:9.16.1-0ubuntu2.9, 1:9.16.1-0ubuntu2.10+12 more	1:9.18.28-0ubuntu0.20.04.1, 1:9.18.28-0ubuntu0.22.04.1, 1:9.18.28-1~deb12u1	39
bindapk	9.18.9-r0, 9.18.10-r0, 9.18.13-r2, 9.18.16-r0+4 more	9.18.31-r0	17

OSV records: ALPINE-CVE-2024-4076 DEBIAN-CVE-2024-4076 UBUNTU-CVE-2024-4076
Also known as: USN-6909-1

Charts affected

55 by stars

Chart

Latest

Affected images

Radar Score

maxscalesvtech-public-helm-charts

1.0.0

1 of 2 See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-4076.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	bind9@1:9.18.18-0ubuntu0.22.04.1	1:9.18.28-0ubuntu0.22.04.1

Open the chart page →

5,841

preparationsvtech-public-helm-charts

1.0.0

1 of 1 See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4076.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	bind9@1:9.18.1-1ubuntu1.1	1:9.18.28-0ubuntu0.22.04.1

Open the chart page →

12,048

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-4076.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	bind9@1:9.16.48-0ubuntu0.20.04.1	1:9.18.28-0ubuntu0.20.04.1

Open the chart page →

18,756

syncthingsvtech-public-helm-charts

1.0.0

1 of 2 See more

syncthing svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-4076.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_syncthing :v1.0.4	1a75d88031fe	bind@9.18.19-r1	9.18.31-r0

Open the chart page →

2,336

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-4076.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	bind9@1:9.16.1-0ubuntu2.9	1:9.18.28-0ubuntu0.20.04.1

Open the chart page →

15,230

Container images carrying it

56 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/onedr0p/radarr :5.3.6.8612	8d299e59fce7	bind@9.18.19-r1	9.18.31-r0	1
ghcr.io/onedr0p/sonarr :4.0.2.1183	27ffdcc8a937	bind@9.18.19-r1	9.18.31-r0	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	bind9@1:9.16.1-0ubuntu2.10	1:9.18.28-0ubuntu0.20.04.1	1
ghcr.io/pascaliske/unbound :0.1.0	9009fbd2ef16	bind@9.18.9-r0	9.18.31-r0	1
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	bind@9.18.19-r0	9.18.31-r0	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	bind9@1:9.18.18-0ubuntu0.22.04.2	1:9.18.28-0ubuntu0.22.04.1	1