CVE-2024-9681

Medium

Advisory

Published 6 Nov 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.020; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 502; of 17,781 indexed, latest versions
Container images: 502; deployed by those charts
Fix available: 3 of 3; affected packages

curl-8.11.0-1.1 on GA media

Carried by container images the latest versions of 502 of 17,781 indexed charts deploy, on 502 images.

Affected package	Affected versions	Fixed in	Images
curldeb	7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+19 more	7.81.0-1ubuntu1.19, 7.88.1-10+deb12u9, 8.5.0-2ubuntu10.5	309
curlapk	8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+13 more	8.11.0-r0	191
curlrpm	7.60.0-lp151.5.6.1	8.11.0-1.1	2

OSV records: ALPINE-CVE-2024-9681 CGA-6vgx-rqv6-p48q DEBIAN-CVE-2024-9681 UBUNTU-CVE-2024-9681 openSUSE-SU-2024:14476-1
Also known as: CGA-f97r-fwm9-2xxp, USN-7104-1

Charts affected

502 by stars

Chart

Latest

Affected images

Radar Score

prometheusalertygqygq2

1.0.0

1 of 1 See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container image	Digest	Package	Fixed in
feiyu563/prometheus-alert :v4.9.1	224cfa68cbd9	curl@8.5.0-r0	8.11.0-r0

Open the chart page →

1,611

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	curl@8.5.0-r0	8.11.0-r0

Open the chart page →

1,589

Container images carrying it

502 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u9	6
bitnamilegacy/kubectl :1.29.2	c74b703deed2	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u9	5
natsio/nats-box :0.14.1	a67913df95f1	curl@8.4.0-r0	8.11.0-r0	5
ghcr.io/conductionnl/commonground-gateway-nginx :latest	b72cf734d85f	curl@8.5.0-r0	8.11.0-r0	5
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.19	4
library/nginx :1.27.1	287ff321f9e3	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u9	4
mastercloudapps/planner :v1.23	40a950b311b2	curl@7.81.0-1ubuntu1.8	7.81.0-1ubuntu1.19	4
codeurjc/planner :v1.0	800cf520c245	curl@7.81.0-1ubuntu1.8	7.81.0-1ubuntu1.19	3
grafana/grafana :11.0.0	0dc5a246ab16	curl@8.5.0-r0	8.11.0-r0	3
grafana/grafana :11.3.0	a0f881232a6f	curl@8.10.1-r0	8.11.0-r0	3
library/nginx :1.25.5-alpine :1.25-alpine	516475cc129d	curl@8.5.0-r0	8.11.0-r0	3
library/nginx :1.25 :1.25.5	a484819eb602	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u9	3
nginxinc/nginx-unprivileged :1.24-alpine	be76a26e238d	curl@8.5.0-r0	8.11.0-r0	3
rcdelacruz/my-strapi-app :js-amd64	38007f358355	curl@8.5.0-r0	8.11.0-r0	3
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	curl@8.5.0-r0	8.11.0-r0	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	curl@7.88.1-10	7.88.1-10+deb12u9	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u9	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.19	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	curl@7.81.0-1ubuntu1.10	7.81.0-1ubuntu1.19	3
quay.io/jupyterhub/configurable-http-proxy :4.6.1	fd916f75415f	curl@8.4.0-r0	8.11.0-r0	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	curl@8.1.2-r0	8.11.0-r0	3
alpine/curl :8.7.1	f0c1b7ca12f6	curl@8.7.1-r0	8.11.0-r0	2
apache/nifi-registry :1.26.0	7cdfd8deec92	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.19	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.5	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u9	2
chatwoot/chatwoot :v3.1.0	d530ab8c1753	curl@8.2.1-r0	8.11.0-r0	2
dtzar/helm-kubectl :3.14.4	55429449408e	curl@8.5.0-r0	8.11.0-r0	2
ethersphere/bee-localchain :latest	0558799ca992	curl@8.5.0-r0	8.11.0-r0	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	curl@7.88.1-10	7.88.1-10+deb12u9	2
grafana/grafana :11.1.0	079600c9517b	curl@8.5.0-r0	8.11.0-r0	2
grafana/grafana :11.1.4	886b56d5534e	curl@8.9.0-r0	8.11.0-r0	2
hazelcast/hazelcast :5.5.0	5dd5d31c7a06	curl@8.9.0-r0	8.11.0-r0	2
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	curl@8.9.1-r0	8.11.0-r0	2
istio/proxyv2 :1.18.0	757d28c24100	curl@7.81.0-1ubuntu1.10	7.81.0-1ubuntu1.19	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u9	2
library/cassandra :4.1.3	7cbcec0086ac	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.19	2
library/nginx :1.27.0	98f8ec75657d	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u9	2
library/phpmyadmin :5.2.1	6e75aa8f767c	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u9	2
library/python :3.7	eedf63967cdb	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u9	2
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	curl@8.9.1-r1	8.11.0-r0	2
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	curl@8.9.0-r0	8.11.0-r0	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u9	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u9	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u9	2
opea/chatqna-conversation-ui :1.0	02d5674ca863	curl@8.9.1-r1	8.11.0-r0	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u9	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u9	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u9	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u9	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u9	2