CVE-2024-6119
HighAdvisory
Published 3 Sept 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.666
- 99th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,137
- of 17,787 indexed, latest versions
- Container images
- 1,268
- deployed by those charts
- Fix available
- 3 of 4
- affected packages
Red Hat Security Advisory: openssl security update
Carried by container images the latest versions of 1,137 of 17,787 indexed charts deploy, on 1,268 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensslapk | 3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+30 more | 3.0.15-r0, 3.1.7-r0, 3.3.2-r0 | 711 |
| openssldeb | 1.1.1f-1ubuntu2.24, 3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5+26 more | 3.0.2-0ubuntu1.18, 3.0.13-0ubuntu3.4, 3.0.14-1~deb12u2 | 514 |
| nodejsdeb | 4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more | no fix listed | 16 |
| opensslrpm | 1:3.0.1-43.el9_0, 1:3.0.7-6.el9_2, 1:3.0.7-17.el9_2, 1:3.0.7-25.el9_3+1 more | 1:3.0.7-28.el9_4 | 32 |
- OSV records
- ALPINE-CVE-2024-6119CGA-4hvj-h6pm-mcxvDEBIAN-CVE-2024-6119UBUNTU-CVE-2024-6119RHSA-2024:6783DSA-5764-1RLSA-2024:6783
- Also known as
- CGA-92jc-655c-2rx8, USN-6986-1
Charts affected
1,137 by stars
Container images carrying it
1,268 by charts deploying them
A fixed version is listed for 3 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| alpine/ | f0c1b7ca12f6 | openssl | 3.3.2-r0 | 2 |
| apache/ | 7cdfd8deec92 | openssl | 3.0.2-0ubuntu1.18 | 2 |
| apache/ | afe59523a6c8 | openssl | 3.1.7-r0 | 2 |
| apache/ | ae0b86d3c4d0 | openssl | 3.0.13-0ubuntu3.4 | 2 |
| aquasec/ | ea3e33bc3c4e | openssl | 3.3.2-r0 | 2 |
| cfssl/ | c9018c2ddf0b | openssl | 3.0.14-1~deb12u2 | 2 |
| chatwoot/ | d530ab8c1753 | openssl | 3.1.7-r0 | 2 |
| clickhouse/ | f226fe41f057 | openssl | 3.1.7-r0 | 2 |
| clickhouse/ | fa394da808cc | openssl | no fix listed | 2 |
| cs3org/ | 02a9e78757b4 | openssl | 3.0.15-r0 | 2 |
| curlimages/ | 4a3396ae573c | openssl | 3.1.7-r0 | 2 |
| curlimages/ | c3b8bee303c6 | openssl | 3.1.7-r0 | 2 |
| daniacobext/ | 9eae4d39fc33 | openssl | 3.0.15-r0 | 2 |
| datagrok/ | f5876d3aebb8 | openssl | no fix listed | 2 |
| dtzar/ | 55429449408e | openssl | 3.1.7-r0 | 2 |
| epamedp/ | 687acf641097 | openssl | 3.1.7-r0 | 2 |
| ethersphere/ | 0558799ca992 | openssl | 3.1.7-r0 | 2 |
| gjeanmart/ | 926264c8f2d1 | openssl | 3.0.14-1~deb12u2 | 2 |
| gradiant/ | 015b30d5fa0f | openssl | no fix listed | 2 |
| grafana/ | 079600c9517b | openssl | 3.1.7-r0 | 2 |
| grafana/ | 886b56d5534e | openssl | 3.1.7-r0 | 2 |
| grafana/ | d947e68a84d9 | openssl | 3.1.7-r0 | 2 |
| grafana/ | f0200a9bff6d | openssl | 3.3.2-r0 | 2 |
| hashicorp/ | 6b4e5dadf082 | openssl | 3.1.7-r0 | 2 |
| hashicorp/ | 5d74a885ae3e | openssl | 3.1.7-r0 | 2 |
| hazelcast/ | 5dd5d31c7a06 | openssl | 3.3.2-r0 | 2 |
| hjacobs/ | 4b2147f47425 | openssl | 3.0.14-1~deb12u2 | 2 |
| inaccel/ | 07271a5c2fe7 | openssl | 3.1.7-r0 | 2 |
| inaccel/ | 187fd448b6f2 | openssl | 3.0.15-r0 | 2 |
| inaccel/ | 34bb93de386f | openssl | 3.1.7-r0 | 2 |
| istio/ | 757d28c24100 | openssl | 3.0.2-0ubuntu1.18 | 2 |
| jenkins/ | b470bcdc4ecd | openssl | 3.0.14-1~deb12u2 | 2 |
| krtk6160/ | cc82a694f818 | openssl | 3.0.15-r0 | 2 |
| lachlanevenson/ | af5cea3f2e40 | openssl | 3.0.15-r0 | 2 |
| langgenius/ | 09b7e8705673 | openssl | 3.0.14-1~deb12u2 | 2 |
| library/ | 7cbcec0086ac | openssl | 3.0.2-0ubuntu1.18 | 2 |
| library/ | 44a366dd7724 | openssl | 3.0.15-r0 | 2 |
| library/ | 0abf60f81588 | openssl | 3.0.2-0ubuntu1.18 | 2 |
| library/ | 334b315c10e5 | openssl | 3.0.2-0ubuntu1.18 | 2 |
| library/ | 92e50059ea0a | openssl | no fix listed | 2 |
| library/ | e101f9db3191 | openssl | 3.0.2-0ubuntu1.18 | 2 |
| library/ | 41d19476c100 | openssl | 3.1.7-r0 | 2 |
| library/ | 406a4fdca9fc | openssl | no fix listed | 2 |
| library/ | b096b4cb9269 | openssl | no fix listed | 2 |
| library/ | b6421fd6d1c5 | openssl | no fix listed | 2 |
| library/ | 1b23d7976f02 | openssl | 3.1.7-r0 | 2 |
| library/ | 1a7b320b2942 | openssl | 3.1.7-r0 | 2 |
| library/ | 1bcddab51b80 | openssl | 3.1.7-r0 | 2 |
| library/ | 85319e5e541b | openssl | 3.1.7-r0 | 2 |
| library/ | 77e5d4a6ad90 | openssl | 3.0.15-r0 | 2 |