CVE-2024-41110
CriticalAdvisory
Published 29 Jul 2024In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.9
- base score, highest
- EPSS
- 0.165
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 280
- of 17,781 indexed, latest versions
- Container images
- 268
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Authz zero length regression
Carried by container images the latest versions of 280 of 17,781 indexed charts deploy, on 268 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible, v20.10.1+incompatible, v20.10.2+incompatible, v20.10.3-0.20211206061157-934f955e3d62+incompatible+45 more | 23.0.15, 25.0.6, 25.0.6+incompatible, 26.1.5+1 more | 266 |
| github.com/ | v20.10.14+incompatible | 25.0.6+incompatible | 2 |
- OSV records
- GHSA-v23v-6jw2-98fqGO-2024-3005
Charts affected
280 by stars
Container images carrying it
268 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| moby/ | c2aeafaed434 | github.com/ | 23.0.15 | 1 |
| moul/ | 332b603727c3 | github.com/ | 23.0.15 | 1 |
| murtazashah46/ | 4d11726cf803 | github.com/ | 23.0.15 | 1 |
| oryd/ | 8f15006a080d | github.com/ | 23.0.15 | 1 |
| otel/ | 9e36620d6c2c | github.com/ | 25.0.6 | 1 |
| otel/ | ee9da0b08d83 | github.com/ | 23.0.15 | 1 |
| otel/ | 71fcef33ae71 | github.com/ | 25.0.6 | 1 |
| otel/ | 995f17004231 | github.com/ | 25.0.6 | 1 |
| otel/ | ba173aa85f3f | github.com/ | 23.0.15 | 1 |
| otel/ | c6671841470b | github.com/ | 25.0.6 | 1 |
| otel/ | dfb3a55ea8c9 | github.com/ | 23.0.15 | 1 |
| phntom/ | 53883b65d9b7 | github.com/ | 23.0.15 | 1 |
| phntom/ | 9242b4df9e65 | github.com/ | 23.0.15 | 1 |
| portainer/ | 3e61aaee1341 | github.com/ | 23.0.15 | 1 |
| prom/ | 4f6c47e39a90 | github.com/ | 25.0.6 | 1 |
| prom/ | b440bc0e8aa5 | github.com/ | 25.0.6 | 1 |
| rancher/ | 8c2599ecfca8 | github.com/ | 25.0.6+incompatible | 1 |
| rancher/ | eaa270df79cc | github.com/ | 23.0.15 | 1 |
| sikalabs/ | 7bd267f30247 | github.com/ | 25.0.6 | 1 |
| simpleidserver/ | 25e378d57d78 | github.com/ | 23.0.15 | 1 |
| sirrend/ | 699e79e3d4e2 | github.com/ | 25.0.6 | 1 |
| someblackmagic/ | 6eca64b6b440 | github.com/ | 23.0.15 | 1 |
| streamnative/ | 31533fa9fab7 | github.com/ | 23.0.15 | 1 |
| gcr.io/ | 135327c978de | github.com/ | 23.0.15 | 1 |
| gcr.io/ | e6c562b5e983 | github.com/ | 23.0.15 | 1 |
| gcr.io/ | f40e65878e25 | github.com/ | 26.1.5 | 1 |
| gcr.io/ | 8d4576f7b98f | github.com/ | 26.1.5 | 1 |
| gcr.io/ | 53d9aa4d2c7a | github.com/ | 23.0.15 | 1 |
| gcr.io/ | 75cfdcfa050a | github.com/ | 23.0.15 | 1 |
| gcr.io/ | 98a2cc7fd62e | github.com/ | 23.0.15 | 1 |
| gcr.io/ | 784518ff3ee7 | github.com/ | 23.0.15 | 1 |
| gcr.io/ | 82940e8c3e0d | github.com/ | 23.0.15 | 1 |
| ghcr.io/ | 67ffb0309acb | github.com/ | 23.0.15 | 1 |
| ghcr.io/ | a608b798fda5 | github.com/ | 25.0.6 | 1 |
| ghcr.io/ | 657a2c9f6e6d | github.com/ | 25.0.6 | 1 |
| ghcr.io/ | 9ab9a675c405 | github.com/ | 25.0.6 | 1 |
| ghcr.io/ | 9608d9b51452 | github.com/ | 25.0.6 | 1 |
| ghcr.io/ | cf78fdf7403a | github.com/ | 23.0.15 | 1 |
| ghcr.io/ | 11cdbbc479b3 | github.com/ | 25.0.6 | 1 |
| ghcr.io/ | 448cb346b12c | github.com/ | 23.0.15 | 1 |
| ghcr.io/ | 700bb42ac21d | github.com/ | 23.0.15 | 1 |
| ghcr.io/ | 8bc853c7414c | github.com/ | 25.0.6 | 1 |
| ghcr.io/ | 2ce077d3d02d | github.com/ | 25.0.6 | 1 |
| ghcr.io/ | 59f75504c5d4 | github.com/ | 25.0.6 | 1 |
| ghcr.io/ | a6ae5aff81ce | github.com/ | 25.0.6 | 1 |
| ghcr.io/ | 2f5be9cde5f9 | github.com/ | 25.0.6 | 1 |
| ghcr.io/ | 71d1f1c0179e | github.com/ | 23.0.15 | 1 |
| ghcr.io/ | c298183a5208 | github.com/ | 23.0.15 | 1 |
| ghcr.io/ | f52e66eff50b | github.com/ | 23.0.15 | 1 |
| ghcr.io/ | df6b11907d33 | github.com/ | 23.0.15 | 1 |