CVE-2013-4235

Medium

Advisory

Published 3 Dec 2019In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.003; 23rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 563; of 17,781 indexed, latest versions
Container images: 508; deployed by those charts
Fix available: 2 of 2; affected packages

libsubid-devel-4.11.1-1.1 on GA media

Carried by container images the latest versions of 563 of 17,781 indexed charts deploy, on 508 images.

Affected package	Affected versions	Fixed in	Images
shadowdeb	1:4.1.5.1-1ubuntu9, 1:4.1.5.1-1ubuntu9.5, 1:4.2-3.1ubuntu5, 1:4.2-3.1ubuntu5.2+13 more	1:4.1.5.1-1ubuntu9.5+esm3, 1:4.2-3.1ubuntu5.5+esm3, 1:4.5-1ubuntu2.5, 1:4.8.1-1ubuntu5.20.04.4+1 more	506
shadowrpm	4.6-lp151.2.3.2	4.11.1-1.1	2

OSV records: UBUNTU-CVE-2013-4235 openSUSE-SU-2024:11749-1
Also known as: USN-5745-1, USN-5745-2

Charts affected

563 by stars

Chart

Latest

Affected images

Radar Score

kube-monitoring-telegram-botviento-repository

1.0.0

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

7,885

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

11,405

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4
flyway/flyway :6.4.4	22d97ceb0c47	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

20,190

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

11,119

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	shadow@1:4.5-1ubuntu2.2	1:4.5-1ubuntu2.5

Open the chart page →

9,743

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4
library/mongo :4.4	4be76f674fc4	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

15,230

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed

Open the chart page →

6,285

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2013-4235.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5
yandex/clickhouse-server :21.3.20	4eccfffb01d7	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4

Open the chart page →

9,207

Container images carrying it

508 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mariadb :10.8.3	0abf60f81588	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	2
library/mongo :5.0	41108d183e97	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed	2
library/mongo :4.2.3	58b25d51baa1	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	2
library/ubuntu :16.04 :xenial	1f1a2d56de1d	shadow@1:4.2-3.1ubuntu5.4	1:4.2-3.1ubuntu5.5+esm3	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	2
mbentley/omada-controller :4.3	f4e682274bed	shadow@1:4.5-1ubuntu2.5	no fix listed	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	shadow@1:4.5-1ubuntu1	1:4.5-1ubuntu2.5	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	2
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	shadow@1:4.8.1-1ubuntu5.20.04.5	no fix listed	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	2
wurstmeister/zookeeper :latest	7a7fd44a7210	shadow@1:4.1.5.1-1ubuntu9	1:4.1.5.1-1ubuntu9.5+esm3	2
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	shadow@1:4.5-1ubuntu2	1:4.5-1ubuntu2.5	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	2
5200710/hadoop :3.2.3-java8	092d3088a5fb	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	shadow@1:4.5-1ubuntu1	1:4.5-1ubuntu2.5	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	shadow@1:4.5-1ubuntu2.2	1:4.5-1ubuntu2.5	1
anguda/ant-media :2.5	c435285fc241	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
apache/iotdb :0.13.3-node	afa47bf1692a	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
apachepulsar/pulsar :2.9.0	d056c89b7131	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
apachepulsar/pulsar :2.8.2	d538416d5afe	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
apache/skywalking-ui :9.2.0	295f1dc87d98	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
apache/skywalking-ui :8.9.1	80530f0308a5	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
arilot/docker-bitcoind :0.17.1	27a4f7e0f9f1	shadow@1:4.2-3.1ubuntu5.3	1:4.2-3.1ubuntu5.5+esm3	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
assistiot/location_processing :latest	e9bae124095f	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	shadow@1:4.8.1-1ubuntu5.20.04.4	no fix listed	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	shadow@1:4.8.1-2ubuntu2	1:4.8.1-2ubuntu2.1	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
bicarus/mx-notifier :1.1.8	bed688d16762	shadow@1:4.8.1-1ubuntu5.20.04.2	1:4.8.1-1ubuntu5.20.04.4	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	shadow@1:4.8.1-1ubuntu5.20.04.1	1:4.8.1-1ubuntu5.20.04.4	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	shadow@1:4.8.1-1ubuntu5.20.04	1:4.8.1-1ubuntu5.20.04.4	1