Is CVE-2024-24789 in the CISA KEV catalog?

No. CVE-2024-24789 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-24789?

CVE-2024-24789 has a CVSS v3 base score of 5.5 (MEDIUM).

What is the EPSS score for CVE-2024-24789?

CVE-2024-24789 has an EPSS score of 0.45% (36th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-24789?

Upgrade aardvark-dns-2:1.10.0 on rocky 8 to 1.module+el8.10.0+22202+761b9a65.aarch64::container-tools:rhel8 or later. Fixes are available for 1537 affected products.

CVE & CISA-KEV Catalog

CVE-2024-24789

MEDIUM

5.5

CVSS v3

NVD

Description

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

How to fix

Remediation Available

aardvark-dns-2:1.10.0Rocky

Fixed in:1.module+el8.10.0+22202+761b9a65.aarch64::container-tools:rhel8RHSA-2024:5258

Fixed in:1.module+el8.10.0+22202+761b9a65.ppc64le::container-tools:rhel8RHSA-2024:5258

Fixed in:1.module+el8.10.0+22202+761b9a65.x86_64::container-tools:rhel8RHSA-2024:5258

Fixed in:1.module+el8.10.0+22202+761b9a65.src::container-tools:rhel8RHSA-2024:5258

Fixed in:1.module+el8.10.0+22202+761b9a65.s390x::container-tools:rhel8RHSA-2024:5258

aardvark-dns-2:1.10.0Red Hat / RHEL

Fixed in:1.module+el8.10.0+22202+761b9a65.s390x::container-tools:rhel8RHSA-2024:5258

Fixed in:1.module+el8.10.0+22202+761b9a65.aarch64::container-tools:rhel8RHSA-2024:5258

Fixed in:1.module+el8.10.0+22202+761b9a65.ppc64le::container-tools:rhel8RHSA-2024:5258

Fixed in:1.module+el8.10.0+22202+761b9a65.x86_64::container-tools:rhel8RHSA-2024:5258

Fixed in:1.module+el8.10.0+22202+761b9a65.src::container-tools:rhel8RHSA-2024:5258

advanced-cluster-security/rhacsRocky

Fixed in:roxctl-rhel8@sha256:1b8ccd467895c572aaf16679912f94b098349b8cd02094aedcd4d15e8160d496_s390xRHSA-2024:10186

Fixed in:scanner-rhel8@sha256:67b04d8f3ee93c00399d90fce995c61bdec2d8ad8f5429f51b6a3fcaf5d837ff_s390xRHSA-2024:10186

Fixed in:collector-rhel8@sha256:d889a70c089484065a2ec82125046ab4a33b128f4dde1964cc079351870e9fb4_ppc64leRHSA-2024:9583

Fixed in:operator-bundle@sha256:b262749b36483ac23f7e9311a410b4e1bfb3455074e189d2cd4e88570c953803_amd64RHSA-2024:10186

Fixed in:main-rhel8@sha256:2a2042c482bc973f5c7f3d0b2269c26fef9091919d615e6204f437af71fc97d2_amd64RHSA-2024:10186

Fixed in:collector-rhel8@sha256:6347c6cdd000ec7f9f76f171313de70bd210b26ef2b575306ef7c9dd6f1dd614_amd64RHSA-2024:10186

Fixed in:roxctl-rhel8@sha256:825d631625833d741b1a1b5dc5b4ed58931bba19c0df3dfffbe37c8d288501d3_s390xRHSA-2024:9583

Fixed in:collector-rhel8@sha256:b7d78346ed114c2259a4318df15fdf825226f1a67c55f6cfb2497616fbd3c667_s390xRHSA-2024:10186

Fixed in:main-rhel8@sha256:e5c6287683f1a41971bd3b0eb43281eea17e7dce287ea4298e08b062ee7cbe2a_s390xRHSA-2024:10186

Fixed in:operator-bundle@sha256:a846783fa12efc4f8f9fb71c6a07b0a0e3d35833f00a437c0e574300f5c0eb44_s390xRHSA-2024:10186

Fixed in:scanner-rhel8@sha256:2873555154a7e86d0d50ab04530f7dac31db601368e42da693306c493ac75836_amd64RHSA-2024:10186

Fixed in:roxctl-rhel8@sha256:f3567a4e068a1d57a8a662fb3bd991f43e01a1b7591667ef9abea9d3af67e0ca_amd64RHSA-2024:10186

Fixed in:rhel8-operator@sha256:defdc09b5b0c215612f77e03cacaf51af89dbc12cde45b794a98ee59f903b1cf_amd64RHSA-2024:10186

Fixed in:rhel8-operator@sha256:23fe140d4053fccc34d5a45424272a6e8541c2c1c555310fba8c0b72d631ae8e_s390xRHSA-2024:10186

Fixed in:operator-bundle@sha256:1798a96413edf0ff45bb7196f0e0ec82eff490ddec27a7d3dc2fa2820d730186_ppc64leRHSA-2024:10775

Fixed in:rhel8-operator@sha256:009cd9ee7d9e3dfaab45915bc69dcc6fd69f9be13b25e84b29c3da239d8f7d96_ppc64leRHSA-2024:10775

Fixed in:roxctl-rhel8@sha256:79f9b5a6aac41130442b1d9bcefc2cb7f54abee4ab3ccb98343088621c6c8c84_ppc64leRHSA-2024:10775

Fixed in:scanner-rhel8@sha256:740c0e0fa6a5f282e9b42636d9211dec2dd8303a497ae9e49de312f22c54c809_ppc64leRHSA-2024:10775

Fixed in:scanner-rhel8@sha256:1d91f26a507a68b406bb35e5773a482ae91e395ee2076a8c1a518f20c5709d39_s390xRHSA-2024:9583

Fixed in:operator-bundle@sha256:1ca8319a9362df3b09515f3a721152af15068cb98596fabd202be639ec847cd8_ppc64leRHSA-2024:9583

Fixed in:main-rhel8@sha256:81b5d9d7c45c4a8609c777e658eb8898e655799c813049ea75b0ad235d6c6031_ppc64leRHSA-2024:9583

Fixed in:collector-rhel8@sha256:2734e59b4f5115595fb286a8e63ddfa735d918e2d40b9a76702704e21fbe0581_ppc64leRHSA-2024:10186

Fixed in:main-rhel8@sha256:18074a936a8e98219d23a1396deaf43329cad464da8830ab739af32f1f339de9_ppc64leRHSA-2024:10186

Fixed in:operator-bundle@sha256:a9d8e784d1518403036a2bdf69ae87d1dada4581c6b233764c4e6ab97ad155ca_ppc64leRHSA-2024:10186

Fixed in:rhel8-operator@sha256:3f623ea920f59e62daca5a72e3989fbb661d15dadcc260ad8c337f95d3ba0fe9_ppc64leRHSA-2024:10186

Fixed in:main-rhel8@sha256:751864511f1db57e3bebff4e9afe632ff8f1ad1ee61a70cb0e016325b7afe3dc_amd64RHSA-2024:10775

Fixed in:roxctl-rhel8@sha256:64f27e29c5669628d29ffd3c1a1afeb3998537396591edb4427cab467fe992a0_ppc64leRHSA-2024:10186

Fixed in:rhel8-operator@sha256:f06e63143446f6adaa05e172e6badc0d1d5ed4c84e2d5d2557d6009f2f8fc020_ppc64leRHSA-2024:9583

Fixed in:roxctl-rhel8@sha256:138e5980154aaa0ac5e9298f784b526351c99704cf695ee431501323ca009ee3_ppc64leRHSA-2024:9583

Fixed in:scanner-rhel8@sha256:85a7cd5b497ecaa4050bd1a1452da303a188c8c39e647506a97cb51f77bd15ed_ppc64leRHSA-2024:9583

Fixed in:scanner-rhel8@sha256:650c3b298aa0a161a5005725e97b1ea9d73bea90ded7a917be241f8f6fce7ef3_ppc64leRHSA-2024:10186

Fixed in:collector-rhel8@sha256:54cdf6a0441ddd865e1fd1b0cac000d6009c03bb553bd1f3e3d750bed551a86f_amd64RHSA-2024:10775

Fixed in:rhel8-operator@sha256:2fd7371cc9b6d31e893ccf947e1eb82dfdafe64cf52f5180fb56eda3b5f39c1e_s390xRHSA-2024:9583

Fixed in:operator-bundle@sha256:7a5e9703c62f13b5b9541dacb86b864a02399a2facc5e77da50c990742fa48db_s390xRHSA-2024:9583

Fixed in:main-rhel8@sha256:91807217f7a5d5a234fe52d22ab0efb5d1555ecbea6bf0e73ea22986f0ccd7b9_s390xRHSA-2024:9583

Fixed in:collector-rhel8@sha256:95cb6eda4d1ab5fc90ac93317051262c3f1fece5bc038ecee402d9637ac9065b_s390xRHSA-2024:9583

Fixed in:scanner-rhel8@sha256:e4bfc598d7d0855fee87d52032f2e421af7ea5e82d5072d85ccf72a3fd7d1c23_s390xRHSA-2024:10775

Fixed in:roxctl-rhel8@sha256:143e97970c10b714ef05fb79ebadca21bfd653e46754bfe79cca099a7219e4b3_s390xRHSA-2024:10775

Fixed in:rhel8-operator@sha256:727a544d5a5080631604e0f2186fdd27168e602c6567bdd9e9e763831b5cf4a3_amd64RHSA-2024:10775

Fixed in:roxctl-rhel8@sha256:ac1a8f21504f8372e4586179ec28fc08803dfc56314f9d41419b8ec4d1e17426_amd64RHSA-2024:10775

Fixed in:rhel8-operator@sha256:3681347b7d5315b1d18414902f7b3d417c3c257f59b3a0f049475baa2a7ac068_s390xRHSA-2024:10775

Fixed in:scanner-rhel8@sha256:771c9316514998b28e8b603b9640fd9a90ba463e537d23f194ddaefdf5325f80_amd64RHSA-2024:10775

Fixed in:operator-bundle@sha256:ce4af0d991cbbdaa03ae510cf12f3e9d818368453e35b43c36f3e4156fb0def4_s390xRHSA-2024:10775

Fixed in:collector-rhel8@sha256:9cc946007966b16eee01c45824a7daf2b7d2bb1db408ad6d64fd30fd1bdc2f61_arm64RHSA-2024:10775

Fixed in:main-rhel8@sha256:cf8b99d1760198bf0bc3e77bb23ec201800c2569fc0355d4634fa963840ff8de_arm64RHSA-2024:10775

Fixed in:operator-bundle@sha256:77827f14557e3551ef914391d14cf2aaa624a0aea465a6e036d4f8ca59d53495_arm64RHSA-2024:10775

Fixed in:rhel8-operator@sha256:9f91c362d341560249973b3ed66da156393e0850aafd73e3a19be3890183f9f9_arm64RHSA-2024:10775

Fixed in:roxctl-rhel8@sha256:00f58ad77b33bf8c952f8699f09b1d5e04c9b3089c5f3b8fe262172867497a53_arm64RHSA-2024:10775

Fixed in:scanner-rhel8@sha256:e7c29870bddb579967f15916aceb2cbb2c7c43968044626634ba678cbd51896c_arm64RHSA-2024:10775

Fixed in:collector-rhel8@sha256:85764f9dc6dd2b814a972f86288ac8d5bc63b55867d87179d25c4a69d2458cb8_ppc64leRHSA-2024:10775

Fixed in:main-rhel8@sha256:9f3a6d73287984428082e9d812f943db4d339e956081d4f9d24bd9703879030f_s390xRHSA-2024:10775

Fixed in:operator-bundle@sha256:c803494bdb0418d27931a15c79f8cf142ae10ccd0a50d76a10c48219d34c59f4_amd64RHSA-2024:10775

Fixed in:collector-rhel8@sha256:d131a61e86b20065f7a3f32440e4b761818349a1d3008087e609f30368f172f4_s390xRHSA-2024:10775

Fixed in:scanner-rhel8@sha256:ad57793f8387672543643510eb5ed7e7bbc3fff4b40b8f46c0133cbaba20fad3_amd64RHSA-2024:9583

Fixed in:roxctl-rhel8@sha256:973018e772a918fdf56c326a9a2dab6930d0495b8832d93a9ce38715bdd3a793_amd64RHSA-2024:9583

Fixed in:rhel8-operator@sha256:16557a28d0f406947511e9c0ac45ee817ea140889bafcb904cac32bd8bd5e1f8_amd64RHSA-2024:9583

Fixed in:operator-bundle@sha256:b481c31ea787bb4817304023ab223996b5deaf01f0c80557d652ca2e76a3dfc5_amd64RHSA-2024:9583

Fixed in:main-rhel8@sha256:ae1ec07ca41d555e1979d5a78c2a5d73b1ba40deea93fd9c68480dd2a273107d_amd64RHSA-2024:9583

Fixed in:main-rhel8@sha256:c18eb752209b8f4eb30c496aa90b73f97e7d3c509f545a830bd4a93242f08476_ppc64leRHSA-2024:10775

Fixed in:collector-rhel8@sha256:7e8ecd268fc23e6012789bf37c79e3f32b2b97fb8680212de48c9d2b45ed6039_amd64RHSA-2024:9583

advanced-cluster-security/rhacsRed Hat / RHEL