USN-8688-1

Unscored

Advisory

Published 27 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,002; of 17,787 indexed, latest versions
Container images: 942; deployed by those charts
Fix available: 1 of 1; affected package

pam vulnerability

Carried by container images the latest versions of 1,002 of 17,787 indexed charts deploy, on 942 images.

Affected package	Affected versions	Fixed in	Images
pamdeb	1.1.8-3.2ubuntu4, 1.1.8-3.6ubuntu2, 1.1.8-3.6ubuntu2.18.04.1, 1.1.8-3.6ubuntu2.18.04.2+22 more	1.1.8-3.6ubuntu2.18.04.6+esm2, 1.3.1-5ubuntu4.7+esm1, 1.4.0-11ubuntu2.8, 1.5.3-5ubuntu5.7	942

OSV records: USN-8688-1

Charts affected

1,002 by stars

Chart

Latest

Affected images

Radar Score

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry USN-8688-1.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	pam@1.1.8-3.6ubuntu2.18.04.3	1.1.8-3.6ubuntu2.18.04.6+esm2
yandex/clickhouse-server :21.3.20	4eccfffb01d7	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1

Open the chart page →

9,250

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry USN-8688-1.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8

Open the chart page →

7,916

Container images carrying it

942 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/tika :2.9.2.1-full	ae0b86d3c4d0	pam@1.5.3-5ubuntu5	1.5.3-5ubuntu5.7	2
clickhouse/clickhouse-server :24.2	ed9640bfff07	pam@1.3.1-5ubuntu4.7	1.3.1-5ubuntu4.7+esm1	2
clickhouse/clickhouse-server :26.8.2 :latest	fa394da808cc	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8	2
cribl/cribl :4.19.2	044f9a5fac9a	pam@1.5.3-5ubuntu5.6	1.5.3-5ubuntu5.7	2
datagrok/grok_connect :latest	f5876d3aebb8	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8	2
emberstack/kubernetes-reflector :10.0.65	51dbd5880929	pam@1.5.3-5ubuntu5.6	1.5.3-5ubuntu5.7	2
eqalpha/keydb :latest	6537505c4235	pam@1.3.1-5ubuntu4.6	1.3.1-5ubuntu4.7+esm1	2
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	pam@1.3.1-5ubuntu4.6	1.3.1-5ubuntu4.7+esm1	2
freeradius/freeradius-server :3.0.21	21c8bfa904d8	pam@1.1.8-3.6ubuntu2.18.04.1	1.1.8-3.6ubuntu2.18.04.6+esm2	2
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	pam@1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7+esm1	2
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	pam@1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7+esm1	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	pam@1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7+esm1	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	pam@1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7+esm1	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	pam@1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7+esm1	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	pam@1.3.1-5ubuntu4.2	1.3.1-5ubuntu4.7+esm1	2
gradiant/ueransim :3.2.6	015b30d5fa0f	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.8	2
grafana/alloy :v1.8.1	7790f6f7fbd8	pam@1.5.3-5ubuntu5.1	1.5.3-5ubuntu5.7	2
grafana/alloy :v1.12.2	f94b1c82957a	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.7	2
honestica/kube-iptables-tailer :master-91	a393242fb939	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	2
hookiesolutions/webhookie :latest	0629694246ba	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	2
interlayhq/interbtc :latest	a66d0e35e70f	pam@1.3.1-5ubuntu4.7	1.3.1-5ubuntu4.7+esm1	2
interlayhq/interbtc-clients :vault-master	c3e311de67da	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	2
istio/kubectl :1.5.10	dbb7726d1bf0	pam@1.1.8-3.6ubuntu2.18.04.1	1.1.8-3.6ubuntu2.18.04.6+esm2	2
istio/proxyv2 :1.18.0	757d28c24100	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8	2
istio/proxyv2 :1.10.3	a78b7a165744	pam@1.1.8-3.6ubuntu2.18.04.3	1.1.8-3.6ubuntu2.18.04.6+esm2	2
kurento/kurento-media-server :latest	03c0d34d0828	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.7	2
library/cassandra :3.11.6	5aa8400b4b3b	pam@1.1.8-3.6ubuntu2.18.04.1	1.1.8-3.6ubuntu2.18.04.6+esm2	2
library/cassandra :4.1.3	7cbcec0086ac	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.8	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	2
library/elasticsearch :8.19.12	89729a95066a	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.7	2
library/mariadb :10.8.3	0abf60f81588	pam@1.4.0-11ubuntu2	1.4.0-11ubuntu2.8	2
library/mariadb :10.10	334b315c10e5	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.8	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.7	2
library/mariadb :11.4	611a2fcc5fa7	pam@1.5.3-5ubuntu5.6	1.5.3-5ubuntu5.7	2
library/mariadb :10.6	92e50059ea0a	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8	2
library/mariadb :11.3.2	e101f9db3191	pam@1.4.0-11ubuntu2.4	1.4.0-11ubuntu2.8	2
library/mongo :8.0.20	098862b1339f	pam@1.5.3-5ubuntu5.5	1.5.3-5ubuntu5.7	2
library/mongo :7.0-jammy :7-jammy	406a4fdca9fc	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8	2
library/mongo :5.0	41108d183e97	pam@1.3.1-5ubuntu4.7	1.3.1-5ubuntu4.7+esm1	2
library/mongo :4.2.3	58b25d51baa1	pam@1.1.8-3.6ubuntu2.18.04.1	1.1.8-3.6ubuntu2.18.04.6+esm2	2
library/mongo :7.0	b6421fd6d1c5	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	pam@1.5.3-5ubuntu5.1	1.5.3-5ubuntu5.7	2
library/rabbitmq :3.12.1-management	f020c06da226	pam@1.4.0-11ubuntu2.3	1.4.0-11ubuntu2.8	2
library/zookeeper :3.9.5	f258365d4882	pam@1.4.0-11ubuntu2.7	1.4.0-11ubuntu2.8	2
mbentley/omada-controller :4.3	f4e682274bed	pam@1.1.8-3.6ubuntu2.18.04.6	1.1.8-3.6ubuntu2.18.04.6+esm2	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	pam@1.3.1-5ubuntu4.1	1.3.1-5ubuntu4.7+esm1	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	pam@1.1.8-3.6ubuntu2	1.1.8-3.6ubuntu2.18.04.6+esm2	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	pam@1.3.1-5ubuntu4.3	1.3.1-5ubuntu4.7+esm1	2