CVE-2013-4235

Medium

Advisory

Published 3 Dec 2019In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 23rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 563; of 17,787 indexed, latest versions
Container images: 508; deployed by those charts
Fix available: 2 of 2; affected packages

libsubid-devel-4.11.1-1.1 on GA media

Carried by container images the latest versions of 563 of 17,787 indexed charts deploy, on 508 images.

Affected package	Affected versions	Fixed in	Images
shadowdeb	1:4.1.5.1-1ubuntu9, 1:4.1.5.1-1ubuntu9.5, 1:4.2-3.1ubuntu5, 1:4.2-3.1ubuntu5.2+13 more	1:4.1.5.1-1ubuntu9.5+esm3, 1:4.2-3.1ubuntu5.5+esm3, 1:4.5-1ubuntu2.5, 1:4.8.1-1ubuntu5.20.04.4+1 more	506
shadowrpm	4.6-lp151.2.3.2	4.11.1-1.1	2

OSV records: UBUNTU-CVE-2013-4235 openSUSE-SU-2024:11749-1
Also known as: USN-5745-1, USN-5745-2

Charts affected

563 by stars

Chart

Latest

Affected images

Radar Score

kube-monitoring-telegram-botviento-repository

1.0.0

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

7,892

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

11,444

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4
flyway/flyway :6.4.4	22d97ceb0c47	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

20,233

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

11,167

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	shadow@1:4.5-1ubuntu2.2	1:4.5-1ubuntu2.5

Open the chart page →

9,748

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

9,225

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

9,225

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

14,420

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4
library/mongo :4.4	4be76f674fc4	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed

Open the chart page →

28,699

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

15,287

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed

Open the chart page →

6,323

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5
yandex/clickhouse-server :21.3.20	4eccfffb01d7	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

9,250

Container images carrying it

508 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/jfwenisch/discord-experiencebot :latest	b52ff07f9f0c	shadow@1:4.5-1ubuntu2.5	no fix listed	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
ghcr.io/k8s-at-home/readarr :v0.1.0.715	ad943e9309e4	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/sabnzbd :v3.3.1	c2d6e775db5a	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/wireguard :v1.0.20210424	448045c4270b	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
ghcr.io/kamu-data/kamu-api-server :0.89.0	4ed7a896dd2b	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed	1
ghcr.io/kore3lab/kore-board.terminal :v0.5.5	f52e66eff50b	shadow@1:4.5-1ubuntu2.5	no fix listed	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
ghcr.io/linuxserver/ombi :4.16.12	4c1b67cf39af	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
ghcr.io/linuxserver/resilio-sync :version-2.7.2.1375	605b6d544028	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	shadow@1:4.5-1ubuntu2.3	1:4.5-1ubuntu2.5	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed	1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	shadow@1:4.5-1ubuntu2.2	1:4.5-1ubuntu2.5	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	shadow@1:4.5-1ubuntu2.5	no fix listed	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	shadow@1:4.5-1ubuntu2.5	no fix listed	1