Lucene search

K
wolfiWolfiWOLFI:CVE-2024-24791
HistorySep 19, 2024 - 9:11 a.m.

CVE-2024-24791 vulnerabilities

2024-09-1909:11:50
packages.wolfi.dev
29
vulnerabilities
packages
kubernetes
unix
aws
operator
controllers
security

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.4

Confidence

High

Vulnerabilities for packages: direnv, grype, containerd, rabbitmq-messaging-topology-operator, kwok, tailscale, jaeger-agent, rabbitmq-default-user-credential-updater, nri-apache, authservice, postgres-operator, temporal-ui-server, external-secrets-operator, cloudflared, bom, kubernetes-csi-livenessprobe, gitsign, grafana, terraform-provider-azurerm, coredns, thanos, kube-vip, litefs, nri-nagios, step-ca, kubeadm-bootstrap-controller, nri-cassandra, crossplane-provider-aws, crossplane, filebeat, protoc-gen-go-grpc, weaviate, istio-operator, nsc, prometheus-pushgateway, kube-logging-operator, kaniko, terragrunt, doppler-kubernetes-operator, kubecolor, cluster-autoscaler, volume-modifier-for-k8s, eksctl, nats-server, flux-image-reflector-controller, thanos-operator, kubernetes, kubernetes-csi-external-provisioner, flannel, golangci-lint, nri-kafka, wireguard-go, gitlab-kas, pombump, kube-state-metrics, aws-flb-firehose, yq, buildah, shfmt, trillian, ctop, snyk-cli, telegraf, terraform-provider-aws, kpt, ollama, vault-csi-provider, kubernetes-dashboard-metrics-scraper, kubernetes-csi-driver-hostpath, newrelic-nri-statsd, controller-gen, multus-cni, smarter-device-manager, terraform-provider-google, helm-push, kyverno-policy-reporter, newrelic-nri-kube-events, clusterctl, zot, nri-consul, metallb, cert-manager-cmctl, cni-plugins, local-static-provisioner, secrets-store-csi-driver-provider-azure, nri-discovery-kubernetes, dask-gateway, dagger, cilium-cli, opentofu, gosu, go-licenses, boring-registry, grafana-agent-operator, oauth2-proxy, prometheus-bind-exporter, configmap-reload, kuberay-operator, gatekeeper, addon-resizer, esbuild, logstash-exporter, hey, flyte, sbom-scorecard, restic, nri-mssql, prometheus-alertmanager, prometheus, flux-kustomize-controller, neuvector-scanner, mattermost, caddy, flux-helm-controller, velero-plugin-for-aws, nri-redis, docker-credential-gcr, rclone, dive, gostatsd, istio-pilot-discovery, falcosidekick, newrelic-prometheus-configurator, prometheus-node-exporter, mods, nri-nginx, runc, kyverno-policy-reporter-ui, contour, gh, zarf, tkn, gitlab-runner, consul, grafana-mimir, secrets-store-csi-driver-provider-aws, aws-efs-csi-driver, helm-operator, conftest, vault-k8s, osv-scanner, libnvidia-container, istio-pilot-agent, ingress-nginx-controller, ghaudit, timestamp-authority, src, aws-network-policy-agent, prometheus-statsd-exporter, go, keda, harbor-cli, spqr, kubernetes-dashboard, cluster-api-controller, nodetaint, bank-vaults, cilium, kafka-proxy, kyverno-policy-reporter-kyverno-plugin, gitness, amass, cert-manager, mage, velero-plugin-for-csi, prometheus-postgres-exporter, slsa-verifier, nri-kubernetes, chartmuseum, stern, harbor-scanner-trivy, protoc-gen-go, q, nri-mongodb, dynamic-localpv-provisioner, cortex, hivemind, cloud-sql-proxy, wait-for-port, stakater-reloader, rabbitmq-cluster-operator, jitsucom-bulker, datadog-agent, cue, actions-runner-controller, render-template, crane, nri-postgresql, kube-rbac-proxy, cadvisor, cass-operator, cosign, pulumi-kubernetes-operator, influxd, cfssl, go-fips, vertical-pod-autoscaler, aactl, prometheus-redis-exporter, k3s, yam, extism, delve, prometheus-nats-exporter, swagger, ip-masq-agent, croc, tekton-pipelines, helm, wire-go, tekton-chains, prometheus-mysqld-exporter, mkcert, local-path-provisioner, gobump, flux-notification-controller, mockery, kind, prometheus-adapter, harbor-registry, prometheus-elasticsearch-exporter, rekor, newrelic-infra-operator, terraform, external-dns, dex, gops, kine, xcaddy, traefik, karpenter, velero, wolfictl, ferretdb, flux-image-automation-controller, gcsfuse, buf, k9s, prometheus-mongodb-exporter, litestream, vcluster, kargo, guac, opentelemetry-collector, fzf, kubernetes-dns-node-cache, hugo-extended, minio, mongo-tools, dagdotdev, tctl, prometheus-beat-exporter, kafka_exporter, neuvector, nerdctl, nri-mysql, k8sgpt, petname, kubeadm-controlplane-controller, teleport, wave, pulumi-language-java, timoni, wazero, fulcio, ytt, capslock, wuzz, whereabouts, nri-jmx, atlantis, opentelemetry-collector-contrib, gitaly, vt-cli, cloudnative-pg, skopeo, kubernetes-ingress-defaultbackend, tigera-operator, opa, bincapz, confluent-common-docker, crossplane-provider-azure, kaf, falcoctl, scorecard, wgcf, pluto, memcached-exporter, step-issuer, nri-f5, lazygit, kubernetes-csi-external-attacher, kubernetes-event-exporter, git-lfs, nfs-subdir-external-provisioner, goreleaser, tempo, gobuster, age, dockerize, kubevela, redka, certificate-transparency, rootlesskit, mc, secrets-store-csi-driver-provider-gcp, neuvector-sigstore-interface, hubble, k3d, octo-sts, aws-ebs-csi-driver, sonobuoy, http-echo, cert-manager-webhook-pdns, paranoia, regclient, nri-prometheus, newrelic-infrastructure-agent, istio-cni, dbmate, flux, overmind, nvidia-device-plugin, secrets-store-csi-driver, cert-exporter, govulncheck, vexctl, nvidia-container-toolkit, gomplate, bazelisk, haproxy-ingress, fluent-bit-plugin-loki, flux-source-controller, grpcurl, k8ssandra-operator, nri-elasticsearch, src-fingerprint, s5cmd, tflint, fuse-overlayfs-snapshotter, spicedb, nats, dataplaneapi, minify, flannel-cni-plugin, logstash, aws-flb-kinesis, ipfs, policy-controller, pulumi, spegel, kubewatch, skaffold, aws-load-balancer-controller, step, glab, prometheus-blackbox-exporter, kubebuilder, kubernetes-csi-node-driver-registrar, hubble-ui, temporal, php-fpm_exporter, docker-credential-acr-env, speedtest-go, aws-flb-cloudwatch, go-bindata, kots, k8sgpt-operator, up, terraform-docs, trust-manager, helm-docs, go-md2man, grafana-rollout-operator, pulumi-language-dotnet, pulumi-language-yaml, harbor, kube-bench, docker-compose, sbom-convert, docker-credential-ecr-login, nri-haproxy, supercronic, kustomize, gpu-feature-discovery, ko, metrics-server, kubeflow-pipelines, influx, hugo, fluent-operator, dgraph, gitleaks, hello-world-golang, cri-tools, nuclei, kubernetes-csi-external-resizer, calico, cluster-proportional-autoscaler, gke-gcloud-auth-plugin, syft, metacontroller, etcd, nri-memcached, oras, kyverno, task, prometheus-stackdriver-exporter, kor

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.4

Confidence

High